CVE-2026-5579

2.1 lowEPSS 0.3%

Low (2.1). EPSS 0.3% chance of exploitation in the next 30 days.

A vulnerability was determined in CodeAstro Online Classroom 1.0. This issue affects some unknown processing of the file /OnlineClassroom/updatedetailsfromfaculty.php?myfid=108 of the component Parameter Handler. Executing a manipulation of the argument fname can lead to sql injection. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized.

Severity

CVSS 4.0

2.1 low

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

CVSS 3.1

6.3 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 17% of CVEs (scores of 2026-10-31)
CWEs: CWE-74, CWE-89
Published: 2026-04-05
Modified: 2026-07-24
Record from: the NVD, synced 2026-10-19

References

https://codeastro.com/
https://github.com/zgr0508/cve/issues/2
https://vuldb.com/submit/783752
https://vuldb.com/vuln/355349
https://vuldb.com/vuln/355349/cti

Check your stack JSON