CVE-2026-8097: CodeAstro Online Classroom askquery.php sql injection
A security flaw has been discovered in CodeAstro Online Classroom 1.0. This vulnerability affects unknown code of the file /askquery.php. The manipulation of the argument squeryx results in sql injection. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-8097?
CVE-2026-8097 is classified as a critical SQL injection vulnerability.
What causes CVE-2026-8097?
CVE-2026-8097 is caused by improper handling of the 'squeryx' parameter in the askquery.php file.
How can I fix CVE-2026-8097?
To fix CVE-2026-8097, sanitize and validate all user inputs before processing them in SQL queries.
Who is affected by CVE-2026-8097?
CVE-2026-8097 affects all installations of CodeAstro Online Classroom version 1.0.
Can CVE-2026-8097 be exploited remotely?
Yes, CVE-2026-8097 can be exploited remotely by sending malicious SQL queries to the affected application.