Unknown · Casap Automated Enrollment System · CVE-2024-33485
**Name of the Vulnerable Software and Affected Versions**
CASAP Automated Enrollment System version V1.0
**Description**
The issue allows a remote attacker to obtain sensitive information via a crafted payload to the "login.php" component. This is due to a SQL Injection vulnerability in the CASAP Automated Enrollment System using PHP/MySQLi.
**Recommendations**
For CASAP Automated Enrollment System version V1.0, consider disabling the login functionality in the "login.php" component until a patch is available to prevent exploitation. Restrict access to the login.php component to minimize the risk of sensitive information disclosure. Avoid using user-inputted data directly in SQL queries to prevent SQL injection attacks.