CVE-2026-7745: CodeAstro Online Classroom facultydetails sql injection
A vulnerability was determined in CodeAstro Online Classroom 1.0. This impacts an unknown function of the file /OnlineClassroom/facultydetails. This manipulation of the argument deleteid causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-7745?
CVE-2026-7745 is classified as a high-severity vulnerability due to its exploitation potential through SQL injection.
How do I fix CVE-2026-7745?
To fix CVE-2026-7745, sanitize and validate user inputs to the deleteid parameter in the /OnlineClassroom/facultydetails file.
What kind of vulnerability is CVE-2026-7745?
CVE-2026-7745 is an SQL injection vulnerability that allows an attacker to manipulate SQL queries.
Which software is affected by CVE-2026-7745?
CVE-2026-7745 affects CodeAstro Online Classroom version 1.0.
Can CVE-2026-7745 lead to data breaches?
Yes, exploitation of CVE-2026-7745 can lead to unauthorized access to sensitive data and potential data breaches.