A vulnerability, which was classified as critical, has been found in code-projects Hotel Management System 1.0. Affected by this issue is the function Edit of the component Edit Room. The manipulation of the argument roomnumber leads to stack-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. Eine kritische Schwachstelle wurde in code-projects Hotel Management System 1.0 entdeckt. Es geht hierbei um die Funktion Edit der Komponente Edit Room. Durch das Manipulieren des Arguments roomnumber mit unbekannten Daten kann eine stack-based buffer overflow-Schwachstelle ausgenutzt werden. Der Angriff muss lokal passieren. Der Exploit steht zur öffentlichen Verfügung.
CVE ID: CVE-2025-4500
CVSS Base Severity: MEDIUM
CVSS Base Score: 5.3
CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Vendor: code-projects
Product: Hotel Management System
EPSS Score: 0.02% (probability of being exploited)
EPSS Percentile: 2.17% (scored less or equal to compared to others)
EPSS Date: 2025-06-08 (when was this score calculated)