CVE-2025-50870

Institute-of-Current-Students 1.0 is vulnerable to Incorrect Access Control in the mydetailsstudent.php endpoint. The myds GET parameter accepts an email address as input and directly returns the corresponding student's personal information without validating the identity or permissions of the...

CVE-2025-50870

Institute-of-Current-Students version 1.0 is vulnerable to Incorrect Access Control (CWE-284) within the mydetailsstudent.php endpoint. The root cause is that the myds GET parameter accepts an email address as input and returns the corresponding student's personal information without validating t...