Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2025-52410 1 Vishalmathur 1 Institute-of-current-students 2025-12-12 9.8 Critical
Institute-of-Current-Students v1.0 contains a time-based blind SQL injection vulnerability in the mydetailsstudent.php endpoint. The `myds` GET parameter is not adequately sanitized before being used in SQL queries.
CVE-2025-46178 1 Vishalmathur 1 Cloudclassroom-php Project 2025-07-02 6.1 Medium
Cross-Site Scripting (XSS) vulnerability exists in askquery.php via the eid parameter in the CloudClassroom PHP Project. This allows remote attackers to inject arbitrary JavaScript in the context of a victim s browser session by sending a crafted URL, leading to session hijacking or defacement.