CVE-2026-5579: CodeAstro Online Classroom Parameter updatedetailsfromfaculty.php sql injection
A vulnerability was determined in CodeAstro Online Classroom 1.0. This issue affects some unknown processing of the file /OnlineClassroom/updatedetailsfromfaculty.php?myfid=108 of the component Parameter Handler. Executing a manipulation of the argument fname can lead to sql injection. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-5579?
CVE-2026-5579 has a high severity rating due to its potential for SQL injection attacks.
How do I fix CVE-2026-5579?
To fix CVE-2026-5579, you should sanitize and validate all user inputs in the updatedetailsfromfaculty.php file.
What components are affected by CVE-2026-5579?
CVE-2026-5579 affects the parameter handler in CodeAstro Online Classroom version 1.0.
What kind of attacks can CVE-2026-5579 allow?
CVE-2026-5579 can allow attackers to execute arbitrary SQL queries against the database.
Is there a patch available for CVE-2026-5579?
At this time, there is no official patch provided for CVE-2026-5579, and users are advised to implement input validation.