kabir0104k/CVE-2025-66947

kabir0104k/CVE-2025-66947

GitHubGitHub
GitHubgithub.com
Releases0
Stars1
SQL Injection in krishanmuraiji SMS v1.0 (CVE-2025-66947)
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2025-66947↗
6.5 MEDIUM—

SQL injection vulnerability in krishanmuraiji SMS v.1.0, within the /studentms/admin/edit-class-detail.php via the editid GET parameter. An attacker can trigger controlled delays using SQL SLEEP() to infer database contents. Successful exploitation may lead to full database compromise, especially within an administrative module.