CVE Catalog
CVE-2025-67403
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk0.14%
4th percentile - higher than 4% of all known CVEs
Summary
SQL Injection vulnerability in CASAP Automated Enrollment System 1.0. An attacker can inject malicious SQL via the class_name parameter in update_class.php.
Risk Assessment
Unauthorized database access, leakage or modification of sensitive data.
Recommendation
Use parameterized queries or prepared statements for the class_name parameter.
Original NVD description (English source)
Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in update_class.php via the parameter class_name.