CRITICAL
manikandan580
CVE published 2026-04-14
CVE-2025-65133
A SQL injection vulnerability exists in the School Management System (version 1.0) by manikandan580. An unauthenticated or authenticated remote attacker can supply a crafted HTTP request to the affected endpoint to manipulate SQL query logic and extract sensitive database information. This vulnerability allows attackers to potentially access and manipulate sensitive data, emphasizing the need for immediat [truncated]