SQL Injection vulnerability in CASAP Automated Enrollment System using PHP/MySQLi with Source Code V1.0 allows a remote attacker to obtain sensitive information via a crafted payload to the login.php component
CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')