PT-2025-47602 · Unknown · Institute-Of-Current-Students

Published 2025-11-20 · Updated 2025-11-21 · CVE-2025-52410

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Institute-of-Current-Students version 1.0

Description The software contains a time-based blind SQL injection issue in the ''mydetailsstudent.php'' endpoint. The myds GET parameter is not properly sanitized before use in SQL queries, potentially allowing for malicious data injection.

Recommendations Ensure proper sanitization of the myds GET parameter in the ''mydetailsstudent.php'' endpoint to prevent SQL injection attacks.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2025-52410

Affected Products

Institute-Of-Current-Students

References · 5

• https://github.com/mathurvishal/Institute-of-Current-Students---PHP-Project/issues/2 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-52410 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-52410 · Security Note
• https://twitter.com/VulmonFeeds/status/1991673323055431797 · Twitter Post
• https://twitter.com/CVEnew/status/1991550826230198664 · Twitter Post