CVE-2026-7741: CodeAstro Online Classroom studentlogin sql injection
A vulnerability was detected in CodeAstro Online Classroom 1.0. Impacted is an unknown function of the file /OnlineClassroom/studentlogin. Performing a manipulation of the argument sid results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-7741?
CVE-2026-7741 is classified as a critical vulnerability due to the potential for SQL injection that could lead to unauthorized data access.
How do I fix CVE-2026-7741?
To fix CVE-2026-7741, validate and sanitize the input parameters in the studentlogin function and implement prepared statements to prevent SQL injection.
What software is affected by CVE-2026-7741?
CVE-2026-7741 affects CodeAstro Online Classroom version 1.0.
Can CVE-2026-7741 be exploited remotely?
Yes, CVE-2026-7741 can be exploited remotely by manipulating the 'sid' argument in the studentlogin endpoint.
What kind of attack does CVE-2026-7741 involve?
CVE-2026-7741 involves a SQL injection attack, allowing attackers to execute arbitrary SQL code.