CVE-2025-65135 — AI Deep Analysis Summary

🚨 **Essence**: A Time-Based Blind SQL Injection flaw in `school-management-system`. 📉 **Consequences**: Attackers can extract database content slowly but surely, leading to total data compromise.

🛡️ **Root Cause**: Improper handling of the `fromdate` POST parameter in `/studentms/admin/between-date-reprtsdetails.php`. 💥 **Flaw**: Lack of input sanitization allows SQL command injection.

🎯 **Affected**: `school-management-system` version **1.0**. 👤 **Developer**: Shubham kumar (Personal project for schools/small institutions). 📂 **Component**: Admin reporting module.

💀 **Capabilities**: Extract sensitive data (users, grades, PII) via blind SQLi. 🔓 **Privileges**: Full read access to the database. 📊 **Impact**: High Confidentiality, Integrity, and Availability risk (CVSS H).

⚡ **Threshold**: **LOW**. 🌐 **Network**: Attackable remotely (AV:N). 🔑 **Auth**: No privileges required (PR:N) for the initial vector? *Note: CVSS says PR:N, implying unauthenticated access or low barrier*.…

📦 **Exploit**: No public PoC listed in data. 🔍 **Status**: Theoretical/Unverified wild exploitation. 📝 **Ref**: Check GitHub TREXNEGRO advisory for details, but no code provided yet.

🔍 **Check**: Scan for the endpoint `/studentms/admin/between-date-reprtsdetails.php`. 📡 **Test**: Send crafted `fromdate` POST payloads with time delays. 🛠️ **Tool**: Use SQLmap or manual Burp Suite intercepts.

🩹 **Patch**: No official fix mentioned in data. 📅 **Date**: Published 2026-04-14 (Future date? Treat as current threat). 🚫 **Status**: Unpatched as of data snapshot.

🛑 **Workaround**: Block external access to `/studentms/admin/`. 🧹 **Input**: Sanitize `fromdate` parameter strictly. 🚫 **Disable**: Turn off the reporting feature if not needed.…

🔥 **Priority**: **CRITICAL**. 📉 **CVSS**: 9.1 (High). 🏫 **Risk**: Schools hold sensitive student data. ⚠️ **Action**: Immediate mitigation required due to high impact and low exploitation barrier.