Description
Institute-of-Current-Students v1.0 contains a time-based blind SQL injection vulnerability in the mydetailsstudent.php endpoint. The `myds` GET parameter is not adequately sanitized before being used in SQL queries.
Critical · 9.8
CVE-2025-52410
EUVD-2025-198302GHSA-3j37-7vrr-3w98
Institute-of-Current-Students v1.0 contains a time-based blind SQL injection vulnerability in the mydetailsstudent.php endpoint. The `myds`…
Published Nov 20, 2025 · Updated Nov 21, 2025 · Assigned by mitre