CodeAstro Online Classroom vulnerabilities
14 known CVE vulnerabilities in CodeAstro Online Classroom, translated and rated.
- CVE-2026-16765High
In the file /OnlineClassroom/loginlinkadmin.php of CodeAstro Online Classroom 1.0, there is an SQL injection vulnerability via the aid argument. The attack can be performed remotely, and the exploit is publicly available.
- CVE-2026-8097Medium
A security flaw has been discovered in CodeAstro Online Classroom 1.0. This vulnerability affects unknown code of the file /askquery.php. The manipulation of the argument squeryx results in SQL injection. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks.
- CVE-2026-7745Medium
A vulnerability was determined in CodeAstro Online Classroom 1.0. This impacts an unknown function of the file /OnlineClassroom/facultydetails. This manipulation of the argument deleteid causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.
- CVE-2026-7744Medium
A vulnerability was found in CodeAstro Online Classroom 1.0, affecting an unknown function of the /OnlineClassroom/addnewstudent file. Manipulation of the fname argument results in SQL injection, and the attack may be performed remotely. The exploit has been made public and could be used.
- CVE-2026-7743Medium
A vulnerability was found in CodeAstro Online Classroom 1.0 in an unknown function of the /OnlineClassroom/studentdetails file. Manipulating the deleteid argument leads to SQL injection. The attack can be performed remotely and the exploit has been publicly disclosed.
- CVE-2026-7742Medium
A flaw was found in CodeAstro Online Classroom 1.0 in an unknown function of the /OnlineClassroom/facultylogin file. Manipulating the fid argument can lead to SQL injection. The attack can be executed remotely and the exploit has been published.
- CVE-2026-7741Medium
A vulnerability was detected in CodeAstro Online Classroom 1.0. Impacted is an unknown function of the file /OnlineClassroom/studentlogin. Performing a manipulation of the argument sid results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and may be used.
- CVE-2026-7196Medium
SQL Injection vulnerability in CodeAstro Online Classroom 1.0. Manipulation of the deleteid argument in /guestdetails allows remote SQL injection.
- CVE-2026-7148Medium
A flaw has been found in CodeAstro Online Classroom 1.0 affecting an unknown part of the file /addnewfaculty. Manipulating the fname argument leads to SQL injection, and the attack can be executed remotely. The exploit has been published and may be used.
- CVE-2026-6033Medium
A vulnerability was found in CodeAstro Online Classroom 1.0 in /updatedetailsfromstudent.php. Manipulating the fname argument leads to SQL injection. The attack can be performed remotely and a public exploit exists.
- CVE-2026-6010Medium
A security flaw has been discovered in CodeAstro Online Classroom 1.0/2.php. Affected by this vulnerability is an unknown functionality of the file /OnlineClassroom/takeassessment2.php?exid=14. Performing a manipulation of the argument Q1 results in sql injection. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks.
- CVE-2026-5580Medium
In CodeAstro Online Classroom 1.0, a SQL injection vulnerability was found in the file /OnlineClassroom/addvideos.php via manipulation of the videotitle argument. The attack can be performed remotely and the exploit is publicly available.
- CVE-2026-5579Medium
In CodeAstro Online Classroom 1.0, a SQL injection vulnerability was found in the file /OnlineClassroom/updatedetailsfromfaculty.php?myfid=108 via manipulation of the fname argument. The attack can be performed remotely and the exploit has been publicly disclosed.
- CVE-2026-5578Medium
In CodeAstro Online Classroom 1.0, an SQL injection vulnerability exists in /OnlineClassroom/addassessment.php via manipulation of the deleteid argument. Remote exploitation is possible and the exploit is public.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

