PT-2025-18179 · Unknown · Code-Projects Product Management System

Zzzxc · CVE-2025-4069 · Published 2025-04-29 · Updated 2025-04-29

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions code-projects Product Management System version 1.0

Description A critical issue has been found in the function add item. The manipulation of the argument st.productname leads to a stack-based buffer overflow. This issue can be exploited locally.

Recommendations For code-projects Product Management System version 1.0, as a temporary workaround, consider disabling the add item function until a patch is available. Restrict access to the add item function to minimize the risk of exploitation. Avoid using the argument st.productname in the affected function until the issue is resolved.

Exploit

Fix

Stack Overflow

Buffer Overflow

Weakness Enumeration

CWE-121

CWE-119

Related Identifiers

CVE-2025-4069

Affected Products

Code-Projects Product Management System

References · 10

• 🔥 https://github.com/zzzxc643/cve/blob/main/PRODUCT_MANAGEMENT_SYSTEM.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-4069 · Security Note
• https://osv.dev/vulnerability/CVE-2025-4069 · Vendor Advisory
• https://t.me/cvetracker/22633 · Telegram Post
• https://vuldb.com/?id.306506 · Note
• https://t.me/cvedetector/24015 · Telegram Post
• https://vuldb.com/?submit.559516 · Note
• https://vuldb.com/?ctiid.306506 · Note
• https://twitter.com/CVEnew/status/1917245411191841114 · Twitter Post
• https://code-projects.org · Note