CVE-2026-6010
Medium · 6.3CVSS
6.3
EPSS
0.2%
Published
Apr 10, 2026
CISA due date
—
The record
A security flaw has been discovered in CodeAstro Online Classroom 1.0/2.php. Affected by this vulnerability is an unknown functionality of the file /OnlineClassroom/takeassessment2.php?exid=14. Performing a manipulation of the argument Q1 results in sql injection. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-119619 A vulnerability was found in 37954679 cak-filemanagement-system up to… CWE-74
- CVE-2026-91915 Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization… CWE-74
- CVE-2026-89435 The Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes &… CWE-74
- CVE-2026-54453 OpenCATS is an open-source applicant tracking system and recruitment CRM for staffing… CWE-74
- CVE-2026-118258 i18next-http-backend is a backend layer for i18next that loads translation resources in… CWE-74
- CVE-2026-103405 An Improper Neutralization of Special Elements in Output Used by a Downstream Component… CWE-74
- CVE-2026-103400 An Improper Neutralization of Special Elements in Output Used by a Downstream Component… CWE-74
- CVE-2026-106648 The Royal Elementor Addons WordPress plugin before 1.7.1070 does not validate submitted… CWE-74