CVE-2025-52410

Institute-of-Current-Students v1.0 is vulnerable to a time-based blind SQL injection in the mydetailsstudent.php endpoint. The root cause is the lack of adequate sanitization of the myds GET parameter before it is used in SQL queries. This flaw could allow an attacker to perform malicious data in...