CVE-2025-67404: SQL Injection
Published Jul 29, 2026
·Updated
Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in savestud.php via the parameters fname, lname, and studentclass.
Affected Software
1 affected component
Sourcecodester CASAP Automated Enrollment System=1.0
Event History
Jul 29, 2026
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·10:16 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-67404?
CVE-2025-67404 has a critical severity rating with a CVSS score of 9.8.
2
How do I fix CVE-2025-67404?
To fix CVE-2025-67404, validate and sanitize all user inputs, especially the parameters fname, lname, and student_class.
3
What are the potential impacts of CVE-2025-67404?
Exploitation of CVE-2025-67404 through SQL Injection may allow an attacker to access sensitive data and compromise the database.
4
Which software is affected by CVE-2025-67404?
CVE-2025-67404 affects Sourcecodester CASAP Automated Enrollment System version 1.0.
5
When was CVE-2025-67404 published?
CVE-2025-67404 was published on July 29, 2026.