Skip to content
Threat Feed
Subscribe

Product

Online Classroom 1.0

1 brief RSS
high advisory

SQL Injection Vulnerability in CodeAstro Online Classroom 1.0 (CVE-2026-16765)

A high-severity SQL injection vulnerability, CVE-2026-16765, exists in CodeAstro Online Classroom 1.0, specifically in the `/OnlineClassroom/loginlinkadmin.php` file, which allows remote unauthenticated attackers to manipulate the `aid` argument, leading to potential data exfiltration and database compromise, with public exploit disclosure increasing immediate risk.

Online Classroom 1.0 web-application sql-injection cve data-exfiltration
1r 1t 1c 6i