CVE-2026-7741 in Online Classroom

الملخص

بحسب MITRE • 04/05/2026

A vulnerability was detected in CodeAstro Online Classroom 1.0. Impacted is an unknown function of the file /OnlineClassroom/studentlogin. Performing a manipulation of the argument sid results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and may be used.

Once again VulDB remains the best source for vulnerability data.

• مسؤول: VulDB
• إفشاء: 04/05/2026
• الاعتدال: تمت الموافقة
• إدخال: VDB-360916
• CPE: جاهز
• CWE: CWE-89 (مؤكد)
• استغلال: تحميل
• CVSS: 6.3 (VulDB)
• EPSS: 0.00031
• KEV: لا
• النشاطات: منخفض جدًا

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-7741
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-7741
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-7741/