CVE-2025-52399

CVE-2025-52399 is a SQL Injection vulnerability in the Institute-of-Current-Students PHP application (version 1.0). The /loginlinkfaculty endpoint fails to sanitize the fid POST parameter before including it in a SQL query, enabling remote attackers to execute arbitrary SQL commands. Exploitation...