CVE-2025-52399-SQLi-Institute-of-Current-Students

CVE-2025-52399 - SQL-инъекция в Institute of Current Students Краткое описание Конечная точка loginlinkfaculty в приложении Institute-of-Current-Students уязвима для SQL-инъекции через POST-параметр fid. Параметр не проходит должную санитизацию перед использованием в SQL-запросе, что позволяет...

CVE-2025-52399-SQLi-Institute-of-Current-Students

CVE-2025-52399 - SQL-инъекция в Institute of Current Students Краткое описание Эндпоинт loginlinkfaculty в приложении Institute-of-Current-Students подвержен SQL-инъекции через POST-параметр fid. Параметр не проходит должную очистку перед использованием в SQL-запросе, что позволяет удалённым...

CVE-2025-51411

🛡️ Раскрытие CVE: CVE-2025-51411 — Отражённый XSS в Institute-of-Current-Students Дата раскрытия: 25 июля 2025 CVE ID: CVE-2025-51411 Серьёзность: СРЕДНЯЯ CVSS 6.1 🧩 Краткое описание Уязвимость отражённого межсайтового скриптинга XSS существует в проекте Institute-of-Current-Students v1.0, а именн...

CVE-2025-52410: Improper Neutralization of Special Elements used in an SQL Command

Institute-of-Current-Students v1.0 contains a time-based blind SQL injection vulnerability in the mydetailsstudent.php endpoint. The myds GET parameter is not adequately sanitized before being used in SQL queries...

EUVD-2025-23372

Malicious code in bioql PyPI...

EUVD-2025-22586

Malicious code in bioql PyPI...

CVE-2025-50869

A stored Cross-Site Scripting XSS vulnerability exists in the qureydetails.php page of Institute-of-Current-Students 1.0, where the input fields for Query and Answer do not properly sanitize user input. Authenticated users can inject arbitrary JavaScript code...

Institute-of-Current-Students 安全漏洞

Institute-of-Current-Students is a school management website by the individual developer Vishal Mathur. A security vulnerability exists in version 1.0 of Institute-of-Current-Students, which stems from insufficient cleanup of the Query and Answer input fields in the file querydetails.php, which...

CVE-2025-50869

A stored Cross-Site Scripting (XSS) vulnerability exists in the qureydetails.php page of Institute-of-Current-Students 1.0 . The root cause is the insufficient sanitization of user input within the Query and Answer input fields. This flaw allows authenticated users to inject and execute arbitrary...

CVE-2025-50869: Improper Neutralization of Input During Web Page Generation

A stored Cross-Site Scripting XSS vulnerability exists in the qureydetails.php page of Institute-of-Current-Students 1.0, where the input fields for Query and Answer do not properly sanitize user input. Authenticated users can inject arbitrary JavaScript code...

CVE-2025-50870: Improper Access Control

Institute-of-Current-Students 1.0 is vulnerable to Incorrect Access Control in the mydetailsstudent.php endpoint. The myds GET parameter accepts an email address as input and directly returns the corresponding student's personal information without validating the identity or permissions of the...

Exploit for CVE-2025-52399

CVE-2025-52399 - SQL Injection in Institute of Current Student...

CVE-2025-51411

A reflected cross-site scripting XSS vulnerability exists in Institute-of-Current-Students v1.0 via the email parameter in the /postquerypublic endpoint. The application fails to properly sanitize user input before reflecting it in the HTML response. This allows unauthenticated attackers to injec...

CVE-2025-51411

The Institute-of-Current-Students v1.0 project (PHP-Project) is vulnerable to a reflected cross-site scripting (XSS) vulnerability within the /postquerypublic endpoint. The root cause is the application's failure to sanitize the email parameter from POST data before reflecting it in the HTML resp...

Institute-of-Current-Students 安全漏洞

Institute-of-Current-Students is a school management website by the individual developer Vishal Mathur. A security vulnerability exists in version 1.0 of Institute-of-Current-Students, which stems from improper email parameter cleanup and could lead to reflective cross-site scripting...

CVE-2025-51411

A reflected cross-site scripting XSS vulnerability exists in Institute-of-Current-Students v1.0 via the email parameter in the /postquerypublic endpoint. The application fails to properly sanitize user input before reflecting it in the HTML response. This allows unauthenticated attackers to injec...

CVE-2025-51411: Improper Neutralization of Input During Web Page Generation

A reflected cross-site scripting XSS vulnerability exists in Institute-of-Current-Students v1.0 via the email parameter in the /postquerypublic endpoint. The application fails to properly sanitize user input before reflecting it in the HTML response. This allows unauthenticated attackers to injec...