ByteOS Network

CVE Vulnerability Details :

CVE-2026-11584

PUBLISHED

More Info Official Page

Assigner-VulDB

Assigner Org ID-1af790b2-7ee1-4545-860a-a788eba489b5

Published At-08 Jun, 2026 | 19:30

Updated At-08 Jun, 2026 | 19:30

▼CVE Numbering Authority (CNA)

CodeAstro Student Attendance Management System createClass.php edit sql injection

A vulnerability was found in CodeAstro Student Attendance Management System 1.0. This impacts an unknown function of the file /attendance-php/Admin/createClass.php?action=edit. The manipulation of the argument ID results in sql injection. It is possible to launch the attack remotely. The exploit has been made public and could be used.

Affected Products

Vendor

CodeAstro

Product

Student Attendance Management System

CPEs

cpe:2.3:h:codeastro:student_attendance_management_system:*:*:*:*:*:*:*:*

Versions

Affected

Problem Types

Type	CWE ID	Description
CWE	CWE-89	SQL Injection
CWE	CWE-74	Injection

Type: CWE

CWE ID: CWE-89

Description: SQL Injection

Type: CWE

CWE ID: CWE-74

Description: Injection

Metrics

Version	Base score	Base severity	Vector
4.0	5.3	MEDIUM	CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
3.1	6.3	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
3.0	6.3	MEDIUM	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
2.0	6.5	N/A	AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR

Version: 4.0

Base score: 5.3

Base severity: MEDIUM

Vector:

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

Version: 3.1

Base score: 6.3

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R

Version: 3.0

Base score: 6.3

Base severity: MEDIUM

Vector:

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R

Version: 2.0

Base score: 6.5

Base severity: N/A

Vector:

AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR

Credits

reporter

SchneiderGrace (VulDB User)

Timeline

Event	Date
Advisory disclosed	2026-06-08 00:00:00
VulDB entry created	2026-06-08 02:00:00
VulDB entry last update	2026-06-08 14:10:51

Event: Advisory disclosed

Date: 2026-06-08 00:00:00

Event: VulDB entry created

Date: 2026-06-08 02:00:00

Event: VulDB entry last update

Date: 2026-06-08 14:10:51

References

Hyperlink	Resource
https://vuldb.com/vuln/369181	vdb-entry technical-description
https://vuldb.com/vuln/369181/cti	signature permissions-required
https://vuldb.com/cve/CVE-2026-11584	third-party-advisory
https://vuldb.com/submit/836799	third-party-advisory
https://github.com/Andelstander/cve/issues/9	exploit issue-tracking
https://codeastro.com/	product