CVE-2025-4891

A vulnerability was found in code-projects Police Station Management System 1.0. It has been classified as critical. Affected is the function criminal::display of the file source.cpp of the component Display Record. The manipulation of the argument N leads to buffer overflow. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used.
References
Link Resource
https://code-projects.org/ Product
https://github.com/zzzxc643/cve/blob/main/Police-StationManagementSystem.md Exploit Third Party Advisory
https://vuldb.com/?ctiid.309444 Permissions Required VDB Entry
https://vuldb.com/?id.309444 Third Party Advisory VDB Entry
https://vuldb.com/?submit.577500 Third Party Advisory VDB Entry
Configurations

Configuration 1 (hide)

cpe:2.3:a:code-projects:police_station_management_system:1.0:*:*:*:*:*:*:*

History

27 May 2025, 15:29

Type Values Removed Values Added
First Time Code-projects police Station Management System
Code-projects
CPE cpe:2.3:a:code-projects:police_station_management_system:1.0:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : 5.3
v2 : unknown
v3 : 7.8
References () https://code-projects.org/ - () https://code-projects.org/ - Product
References () https://vuldb.com/?id.309444 - () https://vuldb.com/?id.309444 - Third Party Advisory, VDB Entry
References () https://vuldb.com/?ctiid.309444 - () https://vuldb.com/?ctiid.309444 - Permissions Required, VDB Entry
References () https://github.com/zzzxc643/cve/blob/main/Police-StationManagementSystem.md - () https://github.com/zzzxc643/cve/blob/main/Police-StationManagementSystem.md - Exploit, Third Party Advisory
References () https://vuldb.com/?submit.577500 - () https://vuldb.com/?submit.577500 - Third Party Advisory, VDB Entry

18 May 2025, 19:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-05-18 19:15

Updated : 2025-05-27 15:29


NVD link : CVE-2025-4891

Mitre link : CVE-2025-4891


JSON object : View

Products Affected

code-projects

  • police_station_management_system
CWE
CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer