CVE-2025-67404 - Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in save_stud.php via the parameters fname, lname, and student_class

Back Back to CVE browser

CRITICAL

Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in save_stud.php via the parameters fname, lname, and student_class

Published Jul 29, 2026

9.8

CRITICAL

CVSS 3.1

EPSS 0.32%

Description

Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in save_stud.php via the parameters fname, lname, and student_class.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

References (2)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-210536		Advisory
https://github.com/um-dsp/TaintRadar/blob/main/sql_injection_cves/automated/20250811-casap-automated-enrollment-system-save_stud.php-fname-sqli/20250811-casap-automated-enrollment-system-save_stud.php-fname-sqli.md		exploit

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Jul 29, 2026

Updated Jul 30, 2026

Reserved Dec 8, 2025

Link CVE-2025-67404

CISA Vulnrichment

Updated Jul 30, 2026

NVD

Status Deferred

Modified Jul 30, 2026

Link CVE-2025-67404

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Jul 29, 2026

Updated Jul 30, 2026

Link EUVD-2025-210536

GitHub

No data