CVE-2025-52410

Critical

Published: 20/11/2025(UTC)Translated: 05/08/2026(UTC)NVD NIST

Summary

Institute-of-Current-Students v1.0 contains a time-based blind SQL injection vulnerability in the mydetailsstudent.php endpoint. The 'myds' GET parameter is not adequately sanitized before being used in SQL queries.

Risk Assessment

An attacker could exploit the vulnerability to read or modify database data, leading to data confidentiality and integrity breaches.

Recommendation

Use parameterized SQL queries and proper input validation in the mydetailsstudent.php endpoint.

Original NVD description (English source)

Institute-of-Current-Students v1.0 contains a time-based blind SQL injection vulnerability in the mydetailsstudent.php endpoint. The `myds` GET parameter is not adequately sanitized before being used in SQL queries.