Beveiligingsadvies

CVE-2025-66947

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-12-26 00:00:00

Laatst bijgewerkt 2025-12-26 16:31:09

Toegewezen door mitre

CVSS-score 6.5

Status PUBLISHED

Beschrijving

SQL injection vulnerability in krishanmuraiji SMS v.1.0, within the /studentms/admin/edit-class-detail.php via the editid GET parameter. An attacker can trigger controlled delays using SQL SLEEP() to infer database contents. Successful exploitation may lead to full database compromise, especially within an administrative module.

← Alle CVE's bekijken Bekijk op cve.org ↗