CVE-2025-3148
LOWcodeprojects Product Management System 1.0 - Buffer Overflow in Login Component
Title source: llmDescription
A vulnerability was found in codeprojects Product Management System 1.0 and classified as problematic. This issue affects some unknown processing of the component Login. The manipulation of the argument Str1 leads to buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.
References (4)
Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry
technical-description
https://vuldb.com/?id.303053
Permissions Required, VDB Entry signature
permissions-required
https://vuldb.com/?ctiid.303053
Third Party Advisory, VDB Entry third-party-advisory
https://vuldb.com/?submit.525395
Broken Link broken-link
exploit
https://github.com/LxxxtSec/CVE/blob/main/CVE-Product_Management_System.md
Scores
CVSS v3
3.3
EPSS
0.0021
EPSS Percentile
11.0%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-119
CWE-120
Status
published
Products (1)
code-projects/product_management_system
1.0
Published
Apr 03, 2025
Tracked Since
Feb 18, 2026