{"id":"CVE-2026-5580","state":"PUBLISHED","title":"CodeAstro Online Classroom Parameter addvideos.php sql injection","description":"A vulnerability was identified in CodeAstro Online Classroom 1.0. Impacted is an unknown function of the file /OnlineClassroom/addvideos.php of the component Parameter Handler. The manipulation of the argument videotitle leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used.","publishedAt":"2026-04-05T16:15:11.717Z","updatedAt":"2026-04-07T02:54:41.665Z","severity":{"score":5.3,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P","source":"VulDB"},"assigner":"VulDB","products":["CodeAstro Online Classroom"],"affected":[{"vendor":"CodeAstro","product":"Online Classroom","versions":[{"version":"1.0","status":"affected"}],"modules":["Parameter Handler"]}],"references":["https://vuldb.com/vuln/355350","https://vuldb.com/vuln/355350/cti","https://vuldb.com/submit/783753","https://github.com/zgr0508/cve/issues/3","https://codeastro.com/"],"weaknesses":["CWE-89","CWE-74"],"ingestedAt":"2026-10-29T20:12:32.778Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/5xxx/CVE-2026-5580.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-5580","state":"PUBLISHED","datePublished":"2026-04-05T16:15:11.717Z","dateUpdated":"2026-04-07T02:54:41.665Z","assignerShortName":"VulDB","assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateReserved":"2026-04-04T15:01:58.435Z"},"containers":{"cna":{"title":"CodeAstro Online Classroom Parameter addvideos.php sql injection","descriptions":[{"lang":"en","value":"A vulnerability was identified in CodeAstro Online Classroom 1.0. Impacted is an unknown function of the file /OnlineClassroom/addvideos.php of the component Parameter Handler. The manipulation of the argument videotitle leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used."}],"affected":[{"vendor":"CodeAstro","product":"Online Classroom","versions":[{"version":"1.0","status":"affected"}],"modules":["Parameter Handler"]}],"references":[{"url":"https://vuldb.com/vuln/355350","name":"VDB-355350 | CodeAstro Online Classroom Parameter addvideos.php sql injection","tags":["vdb-entry","technical-description"]},{"url":"https://vuldb.com/vuln/355350/cti","name":"VDB-355350 | CTI Indicators (IOB, IOC, TTP, IOA)","tags":["signature","permissions-required"]},{"url":"https://vuldb.com/submit/783753","name":"Submit #783753 | codeastro  Online Classroom V1.0 SQL Injection","tags":["third-party-advisory"]},{"url":"https://github.com/zgr0508/cve/issues/3","tags":["exploit","issue-tracking"]},{"url":"https://codeastro.com/","tags":["product"]}],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":5.3,"vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P","baseSeverity":"MEDIUM"}},{"cvssV3_1":{"version":"3.1","baseScore":6.3,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R","baseSeverity":"MEDIUM"}},{"cvssV3_0":{"version":"3.0","baseScore":6.3,"vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R","baseSeverity":"MEDIUM"}},{"cvssV2_0":{"version":"2.0","baseScore":6.5,"vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-89","type":"CWE","lang":"en","description":"SQL Injection"}]},{"descriptions":[{"cweId":"CWE-74","type":"CWE","lang":"en","description":"Injection"}]}],"providerMetadata":{"shortName":"VulDB","orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateUpdated":"2026-04-05T16:15:11.717Z"},"timeline":[{"time":"2026-04-04T00:00:00.000Z","lang":"en","value":"Advisory disclosed"},{"time":"2026-04-04T02:00:00.000Z","lang":"en","value":"VulDB entry created"},{"time":"2026-04-04T17:07:10.000Z","lang":"en","value":"VulDB entry last update"}],"credits":[{"lang":"en","value":"zws58 (VulDB User)","type":"reporter"}]},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-04-07T02:54:27.868304Z","id":"CVE-2026-5580","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-04-07T02:54:41.665Z"}}]}}}