CVE-2026-8097

CVE-2026-8097 affects CodeAstro Online Classroom 1.0. The vulnerability is in unknown code of /askquery.php, where manipulating the squeryx argument enables SQL injection. Exploitation can be performed remotely, and public exploits exist. CVSS-derived metrics in the provided data indicate a MEDIU...

PT-2026-38573

Name of the Vulnerable Software and Affected Versions CodeAstro Online Classroom version 1.0 Description A remote SQL injection flaw exists in the '/askquery.php' endpoint. The issue occurs due to the improper manipulation of the squeryx argument, which allows an attacker to execute arbitrary SQL...