Medium severity6.5NVD Advisory· Published Dec 26, 2025· Updated Jun 17, 2026
CVE-2025-66947
CVE-2025-66947
Description
SQL injection vulnerability in krishanmuraiji SMS v.1.0, within the /studentms/admin/edit-class-detail.php via the editid GET parameter. An attacker can trigger controlled delays using SQL SLEEP() to infer database contents. Successful exploitation may lead to full database compromise, especially within an administrative module.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3(expand)+ 1 more
- (no CPE)
- (no CPE)range: = 1.0
- cpe:2.3:a:krishanmurariji:student_management_system:1.0:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
1- github.com/kabir0104k/CVE-2025-66947/blob/main/README.mdnvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.