How I Hacked My College’s Website and Found a CVE Affecting 100+ Institutions across India Disclaimer:  This research was conducted responsibly, in good faith, and coordinated through CERT/CC. No …

InfoSecWriteUps' platform is  dedicated to providing insights and resources for cybersecurity professionals and enthusiasts. Through articles, tutorials, and security research, InfoSecWriteUps offers insights into cybersecurity vulnerabilities, attack techniques, and defense strategies. Readers can learn about penetration testing, threat intelligence, and incident response to enhance their cybersecurity knowledge and skills.

InfoSec Write-ups

A computer science student discovered a critical SQL injection vulnerability (CVE-2025-14598, CVSS 9.8) in their college's web portal that affected over 100 educational institutions across India, exposing data of 1M+ students. The vulnerability allowed arbitrary SQL queries and potential OS-level command execution. After the vendor became unresponsive, the researcher coordinated disclosure through CERT/CC, leading to an official CVE assignment and patch deployment. The story emphasizes responsible disclosure practices and how classic vulnerabilities still pose massive risks at scale.