CVE-2026-6010: CodeAstro Online Classroom takeassessment2.php sql injection
A security flaw has been discovered in CodeAstro Online Classroom 1.0/2.php. Affected by this vulnerability is an unknown functionality of the file /OnlineClassroom/takeassessment2.php?exid=14. Performing a manipulation of the argument Q1 results in sql injection. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-6010?
CVE-2026-6010 is classified as a high-severity SQL injection vulnerability that can lead to unauthorized access to the database.
How do I fix CVE-2026-6010?
To fix CVE-2026-6010, validate and sanitize all user inputs in the takeassessment2.php file to prevent SQL injection.
What versions of CodeAstro Online Classroom are affected by CVE-2026-6010?
CVE-2026-6010 affects CodeAstro Online Classroom versions 1.0 and 2.0.
Can CVE-2026-6010 lead to data breaches?
Yes, CVE-2026-6010 can potentially lead to data breaches by allowing attackers to execute arbitrary SQL queries.
Is it possible to exploit CVE-2026-6010 remotely?
Yes, CVE-2026-6010 can be exploited remotely if an attacker manipulates the vulnerable parameters in the URL.