{"id":"CVE-2026-8097","state":"PUBLISHED","title":"CodeAstro Online Classroom askquery.php sql injection","description":"A security flaw has been discovered in CodeAstro Online Classroom 1.0. This vulnerability affects unknown code of the file /askquery.php. The manipulation of the argument squeryx results in sql injection. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks.","publishedAt":"2026-05-07T20:15:12.699Z","updatedAt":"2026-05-08T13:53:30.465Z","severity":{"score":5.3,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P","source":"VulDB"},"assigner":"VulDB","products":["CodeAstro Online Classroom"],"affected":[{"vendor":"CodeAstro","product":"Online Classroom","versions":[{"version":"1.0","status":"affected"}]}],"references":["https://vuldb.com/vuln/361849","https://vuldb.com/vuln/361849/cti","https://vuldb.com/submit/808115","http://github.com/suze233/CVE/issues/1","https://codeastro.com/"],"weaknesses":["CWE-89","CWE-74"],"ingestedAt":"2026-10-29T20:13:26.108Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/8xxx/CVE-2026-8097.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-8097","state":"PUBLISHED","datePublished":"2026-05-07T20:15:12.699Z","dateUpdated":"2026-05-08T13:53:30.465Z","assignerShortName":"VulDB","assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateReserved":"2026-05-07T13:15:44.114Z"},"containers":{"cna":{"title":"CodeAstro Online Classroom askquery.php sql injection","descriptions":[{"lang":"en","value":"A security flaw has been discovered in CodeAstro Online Classroom 1.0. This vulnerability affects unknown code of the file /askquery.php. The manipulation of the argument squeryx results in sql injection. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks."}],"affected":[{"vendor":"CodeAstro","product":"Online Classroom","versions":[{"version":"1.0","status":"affected"}]}],"references":[{"url":"https://vuldb.com/vuln/361849","name":"VDB-361849 | CodeAstro Online Classroom askquery.php sql injection","tags":["vdb-entry","technical-description"]},{"url":"https://vuldb.com/vuln/361849/cti","name":"VDB-361849 | CTI Indicators (IOB, IOC, TTP, IOA)","tags":["signature","permissions-required"]},{"url":"https://vuldb.com/submit/808115","name":"Submit #808115 | codeastro  Online Classroom V1.0 SQL Injection","tags":["third-party-advisory"]},{"url":"http://github.com/suze233/CVE/issues/1","tags":["exploit","issue-tracking"]},{"url":"https://codeastro.com/","tags":["product"]}],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":5.3,"vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P","baseSeverity":"MEDIUM"}},{"cvssV3_1":{"version":"3.1","baseScore":6.3,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R","baseSeverity":"MEDIUM"}},{"cvssV3_0":{"version":"3.0","baseScore":6.3,"vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R","baseSeverity":"MEDIUM"}},{"cvssV2_0":{"version":"2.0","baseScore":6.5,"vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-89","type":"CWE","lang":"en","description":"SQL Injection"}]},{"descriptions":[{"cweId":"CWE-74","type":"CWE","lang":"en","description":"Injection"}]}],"providerMetadata":{"shortName":"VulDB","orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateUpdated":"2026-05-07T20:15:12.699Z"},"timeline":[{"time":"2026-05-07T00:00:00.000Z","lang":"en","value":"Advisory disclosed"},{"time":"2026-05-07T02:00:00.000Z","lang":"en","value":"VulDB entry created"},{"time":"2026-05-07T15:21:05.000Z","lang":"en","value":"VulDB entry last update"}],"credits":[{"lang":"en","value":"Kun Liang (VulDB User)","type":"reporter"}]},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-05-08T13:53:19.553834Z","id":"CVE-2026-8097","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-05-08T13:53:30.465Z"}}]}}}