CVE-2026-7196 in Online Classroom

摘要

由 MITRE • 2026-04-28

A security vulnerability has been detected in CodeAstro Online Classroom 1.0. Affected is an unknown function of the file /guestdetails. Such manipulation of the argument deleteid leads to sql injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be used.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• 负责: VulDB
• 披露: 2026-04-28
• 管理: 已接受
• 条目: VDB-359799
• CPE: 准备好
• CWE: CWE-89 (已确认)
• 利用: 下载
• CVSS: 6.3 (VulDB)
• EPSS: 0.00036
• KEV: 否
• 活动: 非常低

来源

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-7196
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-7196
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-7196/