CVE-2025-3148 MEDIUM

CVE-2025-3148: codeprojects Product Management System Login buffer overflow

Vendor Codeprojects
Product Product Management System
Weakness CWE-120
Published April 3, 2025
Last update April 3, 2025
View on NVD All CVEs

CVSS base score

4.8/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

What the vulnerability does

01Description

A vulnerability was found in codeprojects Product Management System 1.0 and classified as problematic. This issue affects some unknown processing of the component Login. The manipulation of the argument Str1 leads to buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.

Key dates

02Disclosure timeline

April 3, 2025 CVE published
April 3, 2025 Record updated