PT-2025-18164 · Unknown · Theater Seat Booking System

Zzzxc · Published 2025-04-29 · Updated 2025-04-29 · CVE-2025-4062

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Theater Seat Booking System version 1.0

Description A critical issue has been found in the Theater Seat Booking System, affecting the cancel function. The manipulation of the cancelcustomername argument leads to a stack-based buffer overflow. This issue can be exploited locally.

Recommendations For Theater Seat Booking System version 1.0, as a temporary workaround, consider disabling the cancel function until a patch is available. Restrict access to the cancel function to minimize the risk of exploitation. Avoid using the cancelcustomername argument in the affected function until the issue is resolved.

Exploit

Fix

Memory Corruption

Stack Overflow

Buffer Overflow

Weakness Enumeration

CWE-787

CWE-121

CWE-119

Related Identifiers

CVE-2025-4062

Affected Products

Theater Seat Booking System

References · 10

• 🔥 https://github.com/zzzxc643/cve/blob/main/Theatre_booking_System.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-4062 · Security Note
• https://osv.dev/vulnerability/CVE-2025-4062 · Vendor Advisory
• https://vuldb.com/?submit.559452 · Note
• https://vuldb.com/?id.306499 · Note
• https://t.me/cvedetector/24006 · Telegram Post
• https://twitter.com/CVEnew/status/1917213804833997007 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1917259087277904339 · Twitter Post
• https://vuldb.com/?ctiid.306499 · Note
• https://code-projects.org · Note