CVE-2025-67405

Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in update_password.php via the new_password parameter. The root cause is unsanitized input in the password update routine. Exploit details, affected versions beyond 1.0, and remediation are not provided in the con...