Lucene search
+L

7 matches found

RedhatCVE
RedhatCVE
•added 2025/11/21 12:18 a.m.•20 views

CVE-2025-52410

Institute-of-Current-Students v1.0 contains a time-based blind SQL injection vulnerability in the mydetailsstudent.php endpoint. The myds GET parameter is not adequately sanitized before being used in SQL queries...

9.8CVSS8.1AI score0.00296EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/11/20 6:31 p.m.•12 views

EUVD-2025-198302

Institute-of-Current-Students v1.0 contains a time-based blind SQL injection vulnerability in the mydetailsstudent.php endpoint. The myds GET parameter is not adequately sanitized before being used in SQL queries...

6.5CVSS7.5AI score0.00296EPSS
SaveExploits0References2
OSV
OSV
•added 2025/11/20 5:15 p.m.•11 views

CVE-2025-52410

Institute-of-Current-Students v1.0 contains a time-based blind SQL injection vulnerability in the mydetailsstudent.php endpoint. The myds GET parameter is not adequately sanitized before being used in SQL queries...

9.8CVSS5.8AI score0.00296EPSS
SaveExploits0References1
NVD
NVD
•added 2025/11/20 5:15 p.m.•16 views

CVE-2025-52410

Institute-of-Current-Students v1.0 contains a time-based blind SQL injection vulnerability in the mydetailsstudent.php endpoint. The myds GET parameter is not adequately sanitized before being used in SQL queries...

9.8CVSS0.00296EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/11/20 12:00 a.m.•12 views

Institute-of-Current-Students 安全漏洞

Institute-of-Current-Students is a school management website by the individual developer Vishal Mathur. Institute-of-Current-Students v1.0 has a security vulnerability that stems from insufficient cleanup of the parameter myds in the mydetailsstudent.php endpoint, which could lead to an SQL...

9.8CVSS7.7AI score0.00296EPSS
SaveExploits0References2
CVE
CVE
•added 2025/11/20 12:00 a.m.•28 views

CVE-2025-52410

Institute-of-Current-Students v1.0 , a school management website, contains a time-based blind SQL injection vulnerability in the mydetailsstudent.php endpoint. The root cause is the insufficient sanitization of the myds GET parameter before it is processed in SQL queries. This flaw could allow an...

7.7AI score0.00296EPSS
SaveExploits0References1Affected Software1
OSV
OSV
•added 2025/06/02 4:15 p.m.•9 views

CVE-2024-57459

A time-based SQL injection vulnerability exists in mydetailsstudent.php in the CloudClassroom PHP Project 1.0. The myds parameter does not properly validate user input, allowing an attacker to inject arbitrary SQL commands...

7.3CVSS5.9AI score0.0024EPSS
SaveExploits0References2
Rows per page
Query Builder