CVE-2025-65133 | THREATINT

Description

A SQL injection vulnerability exists in the School Management System (version 1.0) by manikandan580. An unauthenticated or authenticated remote attacker can supply a crafted HTTP request to the affected endpoint to manipulate SQL query logic and extract sensitive database information.

PUBLISHED Reserved 2025-11-18 | Published 2026-04-14 | Updated 2026-04-16 | Assigner mitre

References

github.com/...ity-Advisories/blob/main/CVE-2025-65133/poc.md exploit

github.com/...-Advisories/blob/main/CVE-2025-65133/README.md

cve.org (CVE-2025-65133)

nvd.nist.gov (CVE-2025-65133)

Download JSON