Lucene search
+L

284 matches found

EUVD
EUVD
added 2026/04/27 11:0 p.m.7 views

EUVD-2026-25953

A security vulnerability has been detected in CodeAstro Online Classroom 1.0. Affected is an unknown function of the file /guestdetails. Such manipulation of the argument deleteid leads to sql injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be...

6.5CVSS6.4AI score0.00201EPSS
SaveExploits0References5
CVE
CVE
added 2026/04/27 11:0 p.m.21 views

CVE-2026-7196

CodeAstro Online Classroom 1.0 is affected by CVE-2026-7196. The vulnerability exists in an unknown function under /guestdetails where manipulating the deleteid parameter enables SQL injection. The issue is exploitable remotely and an exploit has been publicly disclosed. No remediation details ar...

6.5CVSS6.5AI score0.00201EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/04/27 11:0 p.m.42 views

CVE-2026-7196 CodeAstro Online Classroom guestdetails sql injection

A security vulnerability has been detected in CodeAstro Online Classroom 1.0. Affected is an unknown function of the file /guestdetails. Such manipulation of the argument deleteid leads to sql injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be...

6.5CVSS0.00201EPSS
SaveExploits0References5
NVD
NVD
added 2026/04/27 7:16 p.m.11 views

CVE-2026-7148

A flaw has been found in CodeAstro Online Classroom 1.0. This affects an unknown part of the file /addnewfaculty. Executing a manipulation of the argument fname can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used...

6.5CVSS0.00241EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/04/27 6:30 p.m.32 views

CVE-2026-7148 CodeAstro Online Classroom addnewfaculty sql injection

A flaw has been found in CodeAstro Online Classroom 1.0. This affects an unknown part of the file /addnewfaculty. Executing a manipulation of the argument fname can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used...

6.5CVSS0.00241EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2026/04/27 6:30 p.m.3 views

CVE-2026-7148 CodeAstro Online Classroom addnewfaculty sql injection

A flaw has been found in CodeAstro Online Classroom 1.0. This affects an unknown part of the file /addnewfaculty. Executing a manipulation of the argument fname can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used...

6.5CVSS6.4AI score0.00241EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2026/04/27 6:30 p.m.4 views

CVE-2026-7148

A flaw has been found in CodeAstro Online Classroom 1.0. This affects an unknown part of the file /addnewfaculty. Executing a manipulation of the argument fname can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used...

6.5CVSS6.4AI score0.00241EPSS
SaveExploits0References5Affected Software1
EUVD
EUVD
added 2026/04/27 6:30 p.m.6 views

EUVD-2026-25907

A flaw has been found in CodeAstro Online Classroom 1.0. This affects an unknown part of the file /addnewfaculty. Executing a manipulation of the argument fname can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used...

6.5CVSS6.4AI score0.00241EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2026/04/27 7:22 a.m.10 views

CVE-2026-30368

A client-side authorization flaw in Lightspeed Classroom v5.1.2.1763770643 allows unauthenticated attackers to impersonate users by bypassing integrity checks and abusing client-generated authorization tokens, leading to unauthorized control and monitoring of student devices...

5.4CVSS5.2AI score0.00346EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2026/04/27 12:0 a.m.7 views

PT-2026-35513

A flaw has been found in CodeAstro Online Classroom 1.0. This affects an unknown part of the file /addnewfaculty. Executing a manipulation of the argument fname can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used...

6.5CVSS6.5AI score0.00241EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2026/04/27 12:0 a.m.23 views

PT-2026-35542

A security vulnerability has been detected in CodeAstro Online Classroom 1.0. Affected is an unknown function of the file /guestdetails. Such manipulation of the argument deleteid leads to sql injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be...

6.5CVSS6.3AI score0.00201EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2026/04/27 12:0 a.m.12 views

CodeAstro Online Classroom 注入漏洞

CodeAstro Online Classroom is an online classroom platform provided by CodeAstro Inc. Version 1.0 of CodeAstro Online Classroom has a SQL injection vulnerability. This vulnerability arises from improper handling of the parameter fname in the file /addnewfaculty, which may lead to SQL injection...

6.5CVSS6.6AI score0.00241EPSS
SaveExploits0References1
NVD
NVD
added 2026/04/24 4:16 p.m.5 views

CVE-2026-30368

A client-side authorization flaw in Lightspeed Classroom v5.1.2.1763770643 allows unauthenticated attackers to impersonate users by bypassing integrity checks and abusing client-generated authorization tokens, leading to unauthorized control and monitoring of student devices...

5.4CVSS0.00346EPSS
SaveExploits1References3
EUVD
EUVD
added 2026/04/24 12:0 a.m.10 views

EUVD-2026-25567

A client-side authorization flaw in Lightspeed Classroom v5.1.2.1763770643 allows unauthenticated attackers to impersonate users by bypassing integrity checks and abusing client-generated authorization tokens, leading to unauthorized control and monitoring of student devices...

5.2AI score0.00346EPSS
SaveExploits1References2
CVE
CVE
added 2026/04/24 12:0 a.m.11 views

CVE-2026-30368

CVE-2026-30368 concerns Lightspeed Classroom (v5.1.2.1763770643). A client‑side authorization flaw allows unauthenticated attackers to impersonate users by bypassing integrity checks and abusing client‑generated authorization tokens, enabling unauthorized control and monitoring of student devices...

5.4CVSS5.2AI score0.00346EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2026/04/24 12:0 a.m.9 views

PT-2026-35025

A client-side authorization flaw in Lightspeed Classroom v5.1.2.1763770643 allows unauthenticated attackers to impersonate users by bypassing integrity checks and abusing client-generated authorization tokens, leading to unauthorized control and monitoring of student devices...

5.2AI score0.00346EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2026/04/24 12:0 a.m.36 views

CVE-2026-30368

A client-side authorization flaw in Lightspeed Classroom v5.1.2.1763770643 allows unauthenticated attackers to impersonate users by bypassing integrity checks and abusing client-generated authorization tokens, leading to unauthorized control and monitoring of student devices...

5.4CVSS0.00346EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2026/04/24 12:0 a.m.5 views

CVE-2026-30368

A client-side authorization flaw in Lightspeed Classroom v5.1.2.1763770643 allows unauthenticated attackers to impersonate users by bypassing integrity checks and abusing client-generated authorization tokens, leading to unauthorized control and monitoring of student devices...

5.4CVSS5.2AI score0.00346EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2026/04/24 12:0 a.m.11 views

Lightspeed Classroom 安全漏洞

Lightspeed Classroom is a teaching management platform developed by Lightspeed in the United States, used for classroom device management and student behavior monitoring. Version 5.1.2.1763770643 of Lightspeed Classroom contains a security vulnerability. This vulnerability stems from a client...

5.4CVSS5.8AI score0.00346EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2026/04/24 12:0 a.m.2 views

CVE-2026-30368

A client-side authorization flaw in Lightspeed Classroom v5.1.2.1763770643 allows unauthenticated attackers to impersonate users by bypassing integrity checks and abusing client-generated authorization tokens, leading to unauthorized control and monitoring of student devices...

5.4CVSS5.2AI score0.00346EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder