CVE-2025-1163

Summary

A vulnerability classified as critical was found in code-projects Vehicle Parking Management System 1.0. This vulnerability affects the function login of the component Authentication. The manipulation of the argument username leads to stack-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed to the public and may be used.

Affected Software

Weaknesses

• CWE-121: Stack-based Buffer Overflow
• CWE-119: Memory Corruption

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: no
  • Technical Impact: partial

Additional References

• https://github.com/J0hnFFFF/j0hn_upload_three/blob/main/binary1.pdf

References

• https://vuldb.com/?id.295066
• https://vuldb.com/?ctiid.295066
• https://vuldb.com/?submit.494008
• https://github.com/J0hnFFFF/j0hn_upload_three/blob/main/binary1.pdf
• https://code-projects.org/

• ←Previous
• Next→