CVE-2026-5578
MediumCVSS 6.3Exploitation Probability (EPSS)
Low risk18th percentile - higher than 18% of all known CVEs
Summary
In CodeAstro Online Classroom 1.0, an SQL injection vulnerability exists in /OnlineClassroom/addassessment.php via manipulation of the deleteid argument. Remote exploitation is possible and the exploit is public.
Risk Assessment
An attacker can remotely steal, modify, or delete database data, leading to data confidentiality and integrity breaches.
Recommendation
Immediately apply a patch or update the software. If unavailable, implement input validation and parameterized SQL queries.
Other vulnerabilities in CodeAstro Online Classroom
See all- CVE-2026-16765High
In the file /OnlineClassroom/loginlinkadmin.php of CodeAstro Online Classroom 1.0, there is an SQL injection vulnerability via the aid argument. The attack can be performed remotely, and the exploit is publicly available.
- CVE-2026-7196Medium
SQL Injection vulnerability in CodeAstro Online Classroom 1.0. Manipulation of the deleteid argument in /guestdetails allows remote SQL injection.
- CVE-2026-5580Medium
In CodeAstro Online Classroom 1.0, a SQL injection vulnerability was found in the file /OnlineClassroom/addvideos.php via manipulation of the videotitle argument. The attack can be performed remotely and the exploit is publicly available.
- CVE-2026-5579Medium
In CodeAstro Online Classroom 1.0, a SQL injection vulnerability was found in the file /OnlineClassroom/updatedetailsfromfaculty.php?myfid=108 via manipulation of the fname argument. The attack can be performed remotely and the exploit has been publicly disclosed.
Original NVD description (English source)
A vulnerability was found in CodeAstro Online Classroom 1.0. This vulnerability affects unknown code of the file /OnlineClassroom/addassessment.php of the component Parameter Handler. Performing a manipulation of the argument deleteid results in sql injection. The attack is possible to be carried out remotely. The exploit has been made public and could be used.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS