CVE-2026-7744: CodeAstro Online Classroom addnewstudent sql injection
A vulnerability was found in CodeAstro Online Classroom 1.0. This affects an unknown function of the file /OnlineClassroom/addnewstudent. The manipulation of the argument fname results in sql injection. The attack may be performed from remote. The exploit has been made public and could be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-7744?
CVE-2026-7744 is classified as a high severity vulnerability due to its potential for remote code execution via SQL injection.
How do I fix CVE-2026-7744?
To fix CVE-2026-7744, implement input validation and prepared statements to prevent SQL injection in the addnewstudent function.
Who is affected by CVE-2026-7744?
CVE-2026-7744 affects users of CodeAstro Online Classroom version 1.0.
What kind of attack is associated with CVE-2026-7744?
CVE-2026-7744 is associated with SQL injection attacks that can be performed remotely.
What file is involved in CVE-2026-7744?
The vulnerability CVE-2026-7744 is found in the file /OnlineClassroom/addnewstudent.