CVE-2025-4889 MEDIUM

CVE-2025-4889: code-projects Tourism Management System User Registration AddUser buffer overflow

Vendor Code-Projects
Product Tourism Management System
Weakness CWE-120
Published May 18, 2025
Last update May 19, 2025

CVSS base score

4.8/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality
Integrity

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

What the vulnerability does

01Description

A vulnerability has been found in code-projects Tourism Management System 1.0 and classified as critical. This vulnerability affects the function AddUser of the component User Registration. The manipulation of the argument username/password leads to buffer overflow. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used.

Key dates

02Disclosure timeline

May 18, 2025 CVE published
May 19, 2025 Record updated