CVE-2026-7744 - CodeAstro Online Classroom addnewstudent sql injection

Back Back to CVE browser

MEDIUM

CodeAstro Online Classroom addnewstudent sql injection

Published May 4, 2026

5.3

MEDIUM

CVSS 4.0

EPSS 0.32%

Description

A vulnerability was found in CodeAstro Online Classroom 1.0. This affects an unknown function of the file /OnlineClassroom/addnewstudent. The manipulation of the argument fname results in sql injection. The attack may be performed from remote. The exploit has been made public and could be used.

Affected products

Vendor CodeAstro Product Online Classroom Default
n/a
- Version
  1.0
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

CodeAstro

Online Classroom

n/a

Version	Status	Constraints
1.0	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-74

CWE-89

SQL Injection

References (6)

https://codeastro.com/
product
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-26931
Advisory
https://github.com/yuji0903/silver-guide/issues/21
exploitissue-tracking
https://vuldb.com/submit/807696
third-party-advisory
https://vuldb.com/vuln/360919
vdb-entrytechnical-description
https://vuldb.com/vuln/360919/cti
signaturepermissions-required

Link	Providers	Tags
https://codeastro.com/		product
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-26931		Advisory
https://github.com/yuji0903/silver-guide/issues/21		exploitissue-tracking
https://vuldb.com/submit/807696		third-party-advisory
https://vuldb.com/vuln/360919		vdb-entrytechnical-description
https://vuldb.com/vuln/360919/cti		signaturepermissions-required