Description

A vulnerability was found in code-projects Police Station Management System 1.0. It has been classified as critical. Affected is the function criminal::display of the file source.cpp of the component Display Record. The manipulation of the argument N leads to buffer overflow. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. Es wurde eine kritische Schwachstelle in code-projects Police Station Management System 1.0 ausgemacht. Betroffen hiervon ist die Funktion criminal::display der Datei source.cpp der Komponente Display Record. Durch die Manipulation des Arguments N mit unbekannten Daten kann eine buffer overflow-Schwachstelle ausgenutzt werden. Der Angriff hat dabei lokal zu erfolgen. Der Exploit steht zur öffentlichen Verfügung.

Classification

CVE ID: CVE-2025-4891

CVSS Base Severity: MEDIUM

CVSS Base Score: 5.3

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Affected Products

Vendor: code-projects

Product: Police Station Management System

Exploit Prediction Scoring System (EPSS)

EPSS Score: 0.02% (probability of being exploited)

EPSS Percentile: 2.13% (scored less or equal to compared to others)

EPSS Date: 2025-06-16 (when was this score calculated)

References

https://nvd.nist.gov/vuln/detail/CVE-2025-4891
https://vuldb.com/?id.309444
https://vuldb.com/?ctiid.309444
https://vuldb.com/?submit.577500
https://github.com/zzzxc643/cve/blob/main/Police-StationManagementSystem.md
https://code-projects.org/

Timeline