Vendor
SQL Injection Vulnerability in CodeAstro Online Classroom 1.0 (CVE-2026-16765)
1 rule 1 TTP 1 CVE 6 IOCsA high-severity SQL injection vulnerability, CVE-2026-16765, exists in CodeAstro Online Classroom 1.0, specifically in the `/OnlineClassroom/loginlinkadmin.php` file, which allows remote unauthenticated attackers to manipulate the `aid` argument, leading to potential data exfiltration and database compromise, with public exploit disclosure increasing immediate risk.
CVE-2026-15134: SQL Injection in CodeAstro Simple Online Leave Management System
1 rule 2 TTPs 1 CVEA high-severity SQL injection vulnerability (CVE-2026-15134) in CodeAstro Simple Online Leave Management System 1.0, specifically within the '/SimpleOnlineLeave/index.php' file, allows a remote unauthenticated attacker to execute arbitrary SQL commands by manipulating the 'email' argument, leading to unauthorized database access and data compromise, with a public exploit available.
CVE-2026-14640: CodeAstro Apartment Visitor Management System SQL Injection
1 rule 1 TTP 1 CVE 6 IOCsA critical SQL injection vulnerability (CVE-2026-14640) in CodeAstro Apartment Visitor Management System 1.0 allows remote attackers to execute arbitrary SQL queries via manipulation of the 'Username' argument in the Login component's '/index.php' file, leading to unauthorized data access, modification, and potential system compromise.
CodeAstro Leave Management System SQL Injection Vulnerability
2 rules 1 TTP 1 CVEA SQL injection vulnerability (CVE-2026-8132) exists in CodeAstro Leave Management System 1.0 via manipulation of the txt_username parameter in /login.php, enabling remote exploitation and potential database compromise.