Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A flaw has been found in CodeAstro Online Classroom 1.0. This affects an unknown part of the file /addnewfaculty. Executing a manipulation of the argument fname can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
CVE-2026-7148 SQL Injection in CodeAstro Online Classroom 1.0 via fname Parameter Manipulation https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-7148
Post summary
The content announces a SQL Injection vulnerability in CodeAstro Online Classroom 1.0 through the 'fname' parameter, referencing a vulnerability database web page.
CVE-2026-7148 A flaw has been found in CodeAstro Online Classroom 1.0. This affects an unknown part of the file /addnewfaculty. Executing a manipulation of the argument fname can lea… https://www.cve.org/CVERecord?id=CVE-2026-7148
Post summary
A flaw in CodeAstro Online Classroom 1.0 was disclosed affecting the /addnewfaculty endpoint via manipulation of the fname argument; no PoC, exploit, or patch details are provided.