CVE-2025-67403 identifies a SQL Injection vulnerability in Sourcecodester CASAP Automated Enrollment System version 1.0. The issue exists in the update_class.php file where the class_name parameter is not properly sanitized, allowing injection of malicious SQL code. This can lead to unauthorized database queries or modifications. The vulnerability is published but lacks a CVSS score, vendor advisory, or patch information. No known exploits have been reported.

Successful exploitation of this SQL Injection vulnerability could allow an attacker to execute arbitrary SQL commands on the backend database. This may result in unauthorized data access, data modification, or disruption of application functionality. The exact impact depends on the database privileges of the application and the attacker's skill. No confirmed exploitation in the wild has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider implementing input validation and parameterized queries as temporary mitigations to prevent SQL Injection via the class_name parameter.