Detections
Analytics
CVE-2025-52410
critical
Description
Institute-of-Current-Students v1.0 contains a time-based blind SQL injection vulnerability in the mydetailsstudent.php endpoint. The `myds` GET parameter is not adequately sanitized before being used in SQL queries.
References
https://github.com/mathurvishal/Institute-of-Current-Students---PHP-Project/issues/2