Skip to main content

CodeAstro Online Classroom CVE-2026-7743

| EUVD-2026-26929 LOW
SQL Injection (CWE-89)
2026-05-04 VulDB
2.1
CVSS 4.0

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
X

Lifecycle Timeline

7
PoC Detected
May 04, 2026 - 15:17 vuln.today
Public exploit code
Severity Changed
May 04, 2026 - 08:22 NVD
MEDIUM LOW
CVSS changed
May 04, 2026 - 08:22 NVD
6.3 (MEDIUM) 2.1 (LOW)
Analysis Generated
May 04, 2026 - 08:15 vuln.today
EUVD ID Assigned
May 04, 2026 - 07:45 euvd
EUVD-2026-26929
Analysis Generated
May 04, 2026 - 07:45 vuln.today
CVE Published
May 04, 2026 - 07:15 nvd
LOW 2.1

DescriptionNVD

A vulnerability has been found in CodeAstro Online Classroom 1.0. The impacted element is an unknown function of the file /OnlineClassroom/studentdetails. The manipulation of the argument deleteid leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used.

AnalysisAI

SQL injection in CodeAstro Online Classroom 1.0 allows authenticated remote attackers to execute arbitrary SQL queries via the deleteid parameter in the /OnlineClassroom/studentdetails endpoint, enabling unauthorized data access, modification, and potential denial of service. The vulnerability has publicly available exploit code and confirmed exploitation potential, affecting all versions up to 1.0.

Sign in for full analysis, threat intelligence, and remediation guidance.

Share

CVE-2026-7743 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy