PT-2026-65917
CVE-2025-67403
·
تاريخ النشر
2026-07-29
·
تاريخ التحديث
2026-10-12
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Sourcecodester CASAP Automated Enrollment System version 1.0
Description
An issue exists that allows SQL Injection, a technique where malicious SQL statements are inserted into entry fields for execution, via the 'update class.php' endpoint through the
class name parameter.Recommendations
Update Sourcecodester CASAP Automated Enrollment System version 1.0 to a version that contains a fix for this issue.
As a temporary workaround, avoid using the
class name parameter in the 'update class.php' endpoint until the issue is resolved. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾