CVE-2024-33485
CRITICALCASAP Automated Enrollment System <V1.0 - SQL Injection
Title source: llmDescription
SQL Injection vulnerability in CASAP Automated Enrollment System using PHP/MySQLi with Source Code V1.0 allows a remote attacker to obtain sensitive information via a crafted payload to the login.php component
Exploits (1)
exploitdb
WORKING POC
by Himanshu Shukla · pythonwebappsphp
https://www.exploit-db.com/exploits/49463
Scores
CVSS v3
9.8
EPSS
0.0059
EPSS Percentile
69.2%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-89
Status
published
Published
May 14, 2024
Tracked Since
Feb 18, 2026