CVE-2025-50870

Institute-of-Current-Students version 1.0 is vulnerable to Incorrect Access Control (CWE-284) within the mydetailsstudent.php endpoint. The root cause is that the myds GET parameter accepts an email address as input and returns the corresponding student's personal information without validating t...