critical9.8
CVE-2025-52410
Institute-of-Current-Students v1.0 contains a time-based blind SQL injection vulnerability in the mydetailsstudent.php endpoint.
Impact
Institute-of-Current-Students v1.0 contains a time-based blind SQL injection vulnerability in the mydetailsstudent.php endpoint. The `myds` GET parameter is not adequately sanitized before being used in SQL queries.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vishalmathur | Institute-Of-Current-Students | Version 1.0 |