CVE-2026-7744

CodeAstro Online Classroom 1.0 contains a SQL injection in /OnlineClassroom/addnewstudent triggered by the fname parameter. The vulnerability is exploitable remotely (attack vector: NETWORK) and has been demonstrated at PROOF-OF-CONCEPT maturity. Affected component is the unknown function handlin...