CVE-2026-6010

CodeAstro Online Classroom (v1.0/2.php) contains an SQL injection in /OnlineClassroom/takeassessment2.php?exid=14. Manipulating the Q1 argument allows remote exploitation. The vulnerability is publicly exploit-ready per the CVE description; no remediation details are provided in the available doc...