PT-2026-36787 · Codeastro · Online Classroom

Yu_Ji · Published 2026-05-04 · Updated 2026-05-04 · CVE-2026-7744

Mitre

CVSS v3.1

6.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

A vulnerability was found in CodeAstro Online Classroom 1.0. This affects an unknown function of the file /OnlineClassroom/addnewstudent. The manipulation of the argument fname results in sql injection. The attack may be performed from remote. The exploit has been made public and could be used.

Exploit

Fix

SQL injection

Special Elements Injection

Weakness Enumeration

CWE-89

CWE-74

Related Identifiers

CVE-2026-7744

Affected Products

Online Classroom

References · 6

• 🔥 https://github.com/yuji0903/silver-guide/issues/21 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-7744 · Security Note
• https://vuldb.com/vuln/360919/cti · Note
• https://vuldb.com/submit/807696 · Note
• https://codeastro.com · Note
• https://vuldb.com/vuln/360919 · Note