CVE-2026-11583: CodeAstro Student Attendance Management System createClass.php sql injection

Published Jun 8, 2026

Updated

A vulnerability has been found in CodeAstro Student Attendance Management System 1.0. This affects an unknown function of the file /attendance-php/Admin/createClass.php. The manipulation of the argument className leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Affected Software

1 affected component

Codeastro CodeAstro Student Attendance Management System=1.0

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Remove
Remove CodeAstro Student Attendance Management System: /attendance-php/Admin/createClass.php from your environment.
If the createClass.php endpoint is not required, remove or disable /attendance-php/Admin/createClass.php to eliminate the vulnerable code until it can be fixed.
Configuration
Modify createClass.php to treat the className parameter safely: perform input validation/sanitization and use prepared statements/parameterized SQL queries (no direct concatenation into SQL) to prevent SQL injection.
CodeAstro Student Attendance Management System: /attendance-php/Admin/createClass.php className input handling = use parameterized queries; validate and sanitize input
Compensating control
Restrict external access to /attendance-php/Admin/createClass.php (for example via firewall rules, network ACLs, or a web application firewall) to trusted IPs or internal networks until the vulnerability is remediated.
Operational
Monitor application and web server logs for attempted accesses to /attendance-php/Admin/createClass.php and investigate evidence of exploitation; follow incident response procedures if malicious activity is detected.

Event History

Jun 8, 2026

CVE Published

via MITRE·07:15 PM

Data Sourced

via MITRE·07:15 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·08:16 PM

DescriptionSeverityWeakness

Mar 11, 58406

Event

via NVD·10:27 PM

Frequently Asked Questions

What is the severity of CVE-2026-11583?

The severity of CVE-2026-11583 is medium, with a CVSS score of 6.3.

How do I fix CVE-2026-11583?

To fix CVE-2026-11583, sanitize and validate user inputs in the createClass.php file to prevent SQL injection.

What type of vulnerability is CVE-2026-11583?

CVE-2026-11583 is classified as an SQL injection vulnerability.

Can CVE-2026-11583 be exploited remotely?

Yes, CVE-2026-11583 can be exploited remotely due to the SQL injection flaw.

Which software is affected by CVE-2026-11583?

CVE-2026-11583 affects CodeAstro Student Attendance Management System version 1.0.