CVE-2026-7196

MediumCVSS 6.3

Published: 28/04/2026(UTC)Updated: 24/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.20%

10th percentile - higher than 10% of all known CVEs

Summary

SQL Injection vulnerability in CodeAstro Online Classroom 1.0. Manipulation of the deleteid argument in /guestdetails allows remote SQL injection.

Risk Assessment

An attacker can read, modify, or delete database data, leading to loss of confidentiality and integrity.

Recommendation

Apply input filtering and use parameterized queries. Update the system if a patch is available.

Original NVD description (English source)

A security vulnerability has been detected in CodeAstro Online Classroom 1.0. Affected is an unknown function of the file /guestdetails. Such manipulation of the argument deleteid leads to sql injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be used.