VULNERABILITY INTELLIGENCE

CVE-2025-66947

CVSS score6.5 MEDIUM
EPSS probability0.28%
CISA KEVNot currently listed
Published2025-12-26
Last modified2026-10-14
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Description

SQL injection vulnerability in krishanmuraiji SMS v.1.0, within the /studentms/admin/edit-class-detail.php via the editid GET parameter. An attacker can trigger controlled delays using SQL SLEEP() to infer database contents. Successful exploitation may lead to full database compromise, especially within an administrative module.

Weakness classification

  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-89

Primary references