{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-8097","assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","state":"PUBLISHED","assignerShortName":"VulDB","dateReserved":"2026-05-07T13:15:44.114Z","datePublished":"2026-05-07T20:15:12.699Z","dateUpdated":"2026-05-08T13:53:30.465Z"},"containers":{"cna":{"providerMetadata":{"orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","shortName":"VulDB","dateUpdated":"2026-05-07T20:15:12.699Z"},"title":"CodeAstro Online Classroom askquery.php sql injection","problemTypes":[{"descriptions":[{"type":"CWE","cweId":"CWE-89","lang":"en","description":"SQL Injection"}]},{"descriptions":[{"type":"CWE","cweId":"CWE-74","lang":"en","description":"Injection"}]}],"affected":[{"vendor":"CodeAstro","product":"Online Classroom","versions":[{"version":"1.0","status":"affected"}]}],"descriptions":[{"lang":"en","value":"A security flaw has been discovered in CodeAstro Online Classroom 1.0. This vulnerability affects unknown code of the file /askquery.php. The manipulation of the argument squeryx results in sql injection. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks."}],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":5.3,"vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P","baseSeverity":"MEDIUM"}},{"cvssV3_1":{"version":"3.1","baseScore":6.3,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R","baseSeverity":"MEDIUM"}},{"cvssV3_0":{"version":"3.0","baseScore":6.3,"vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R","baseSeverity":"MEDIUM"}},{"cvssV2_0":{"version":"2.0","baseScore":6.5,"vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR"}}],"timeline":[{"time":"2026-05-07T00:00:00.000Z","lang":"en","value":"Advisory disclosed"},{"time":"2026-05-07T02:00:00.000Z","lang":"en","value":"VulDB entry created"},{"time":"2026-05-07T15:21:05.000Z","lang":"en","value":"VulDB entry last update"}],"credits":[{"lang":"en","value":"Kun Liang (VulDB User)","type":"reporter"}],"references":[{"url":"https://vuldb.com/vuln/361849","name":"VDB-361849 | CodeAstro Online Classroom askquery.php sql injection","tags":["vdb-entry","technical-description"]},{"url":"https://vuldb.com/vuln/361849/cti","name":"VDB-361849 | CTI Indicators (IOB, IOC, TTP, IOA)","tags":["signature","permissions-required"]},{"url":"https://vuldb.com/submit/808115","name":"Submit #808115 | codeastro  Online Classroom V1.0 SQL Injection","tags":["third-party-advisory"]},{"url":"http://github.com/suze233/CVE/issues/1","tags":["exploit","issue-tracking"]},{"url":"https://codeastro.com/","tags":["product"]}]},"adp":[{"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-05-08T13:53:19.553834Z","id":"CVE-2026-8097","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"title":"CISA ADP Vulnrichment","providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-05-08T13:53:30.465Z"}}]}}