Critical severity9.8NVD Advisory· Published Nov 20, 2025· Updated Jun 17, 2026

CVE-2025-52410

Description

Institute-of-Current-Students v1.0 contains a time-based blind SQL injection vulnerability in the mydetailsstudent.php endpoint. The myds GET parameter is not adequately sanitized before being used in SQL queries.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Institute Of Current Students/Institute-of-Current-Studentsllm-fuzzy
Range: =1.0
Mathurvishal/Institute-of-Current-Students---PHP-Projectllm-create
Range: =1.0
Institute-of-Current-Students/Institute-of-Current-Studentsdescription
Vishalmathur/Institute Of Current Students
cpe:2.3:a:vishalmathur:institute-of-current-students:1.0:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

github.com/mathurvishal/Institute-of-Current-Students---PHP-Project/issues/2nvdIssue TrackingVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000