CVE-2026-5578

CodeAstro Online Classroom Parameter addassessment.php sql injection

CVSS 5.3 MEDIUMEPSS 0.3%CWE-74 CWE-89

A vulnerability was found in CodeAstro Online Classroom 1.0. This vulnerability affects unknown code of the file /OnlineClassroom/addassessment.php of the component Parameter Handler. Performing a manipulation of the argument deleteid results in sql injection. The attack is possible to be carried out remotely. The exploit has been made public and could be used.

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

Affected products

CodeAstro · Online Classroom

public PoCs found — 1

cve_referencegithub.com/zgr0508/cve/issues/1unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://codeastro.com/https://github.com/zgr0508/cve/issues/1 https://vuldb.com/submit/783751 https://vuldb.com/vuln/355348 https://vuldb.com/vuln/355348/cti