CVE-2025-3728

MEDIUM

SourceCodester Simple Hotel Booking System 1.0 - Buffer Overflow

Title source: llm
STIX 2.1

Description

A vulnerability classified as critical was found in SourceCodester Simple Hotel Booking System 1.0. This vulnerability affects the function Login. The manipulation of the argument uname leads to buffer overflow. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used.

References (5)

Core 5
Core References
Third Party Advisory, VDB Entry vdb-entry technical-description
https://vuldb.com/?id.305074
Permissions Required, VDB Entry signature permissions-required
https://vuldb.com/?ctiid.305074
Third Party Advisory, VDB Entry third-party-advisory
https://vuldb.com/?submit.553627
Exploit, Issue Tracking, Third Party Advisory exploit issue-tracking
https://github.com/eeeee-vul/CVE/issues/3

Scores

CVSS v3 5.3
EPSS 0.0008
EPSS Percentile 23.7%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-119 CWE-120
Status published
Products (1)
razormist/simple_hotel_booking_system 1.0
Published Apr 16, 2025
Tracked Since Feb 18, 2026