CVE-2025-67404

CriticalCVSS 9.8

Published: 29/07/2026(UTC)Updated: 30/07/2026(UTC)Translated: 30/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.14%

4th percentile - higher than 4% of all known CVEs

Summary

Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL injection in save_stud.php via the fname, lname, and student_class parameters.

Risk Assessment

An attacker can add or modify student data, potentially leading to data integrity breaches and unauthorized access.

Recommendation

Update the system to the latest version or apply a patch to prevent SQL injection, e.g., by using prepared statements.

Original NVD description (English source)

Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in save_stud.php via the parameters fname, lname, and student_class.