CVE-2025-52410: Vishalmathur Institute-Of-Current-Students

Critical severity, CVSS 9.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Institute-of-Current-Students v1.0 contains a time-based blind SQL injection vulnerability in the mydetailsstudent.php endpoint. The `myds` GET parameter is not adequately sanitized before being used in SQL queries.

Affected products

• Vishalmathur Institute-Of-Current-Students: version 1.0 only

Published 2025-11-20. Last modified 2026-06-17.