CVE-2025-67403

Name of the Vulnerable Software and Affected Versions Sourcecodester CASAP Automated Enrollment System version 1.0

Description An issue exists that allows SQL Injection, a technique where malicious SQL statements are inserted into entry fields for execution, via the 'update class.php' endpoint through the class name parameter.

Recommendations Update Sourcecodester CASAP Automated Enrollment System version 1.0 to a version that contains a fix for this issue. As a temporary workaround, avoid using the class name parameter in the 'update class.php' endpoint until the issue is resolved.