CVE-2026-5580

CodeAstro Online Classroom Parameter addvideos.php sql injection

CVSS 5.3 MEDIUMEPSS 0.3%CWE-74 CWE-89

A vulnerability was identified in CodeAstro Online Classroom 1.0. Impacted is an unknown function of the file /OnlineClassroom/addvideos.php of the component Parameter Handler. The manipulation of the argument videotitle leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used.

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

Productos afectados

CodeAstro · Online Classroom

PoCs públicas encontradas — 1

cve_referencegithub.com/zgr0508/cve/issues/3no verificado

⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

https://codeastro.com/https://github.com/zgr0508/cve/issues/3 https://vuldb.com/submit/783753 https://vuldb.com/vuln/355350 https://vuldb.com/vuln/355350/cti