CVE-2026-16765

Publié : 23 juillet 2026

Modifié : 23 juillet 2026

Score CVSS

7.3

HIGH

Description détaillée

A vulnerability was determined in CodeAstro Online Classroom 1.0. Affected by this issue is some unknown functionality of the file /OnlineClassroom/loginlinkadmin.php. Executing a manipulation of the argument aid can lead to sql injection. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized.

Vecteur d'attaque (CVSS)

Vecteur brut :CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Références et Patchs

https://codeastro.com/https://github.com/anglemsg2401-bot/cve/issues/1 https://vuldb.com/cve/CVE-2026-16765 https://vuldb.com/submit/862023 https://vuldb.com/vuln/382637 https://vuldb.com/vuln/382637/cti

Dernières Vulnérabilités

CVE-2026-50044

Pronetiqs IntraVUE versions 3.2.1a14 and prior have an inadequate encryption strength vulnerability which could allow an attacker to steal admin credentials via weak hash or a pass-the-hash attack.

VOIR DÉTAILS

CVE-2026-44955

Pronetiqs IntraVUE versions 3.2.1a14 and prior have an exposure of sensitive system information to an unauthorized control sphere vulnerability which could allow for asset discovery by unauthenticated users.

VOIR DÉTAILS

CVE-2026-42933

Pronetiqs IntraVUE versions 3.2.1a14 and prior have an unintended proxy or intermediary vulnerability which could allow an attacker to use an active proxy, which would bypass OT segmentation.

VOIR DÉTAILS