CVE-2025-3728

SourceCodester Simple Hotel Booking System login buffer overflow

CVSS 4.8 MEDIUMEPSS 0.3%CWE-119 CWE-120

Vexday Risk Score

13Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 4.8EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

16 abr 2025Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

A vulnerability classified as critical was found in SourceCodester Simple Hotel Booking System 1.0. This vulnerability affects the function Login. The manipulation of the argument uname leads to buffer overflow. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used.

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Productos afectados

SourceCodester · Simple Hotel Booking System

Referencias

https://github.com/eeeee-vul/CVE/issues/3 https://vuldb.com/?ctiid.305074 https://vuldb.com/?id.305074 https://vuldb.com/?submit.553627 https://www.sourcecodester.com/