PT-2025-20623 · Unknown · Code-Projects Hospital Management System

Zzzxc · Published 2025-05-10 · Updated 2025-05-10 · CVE-2025-4499

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions code-projects Simple Hospital Management System version 1.0

Description A critical vulnerability was found in the Simple Hospital Management System. The issue affects the Add function of the Add Information component. Manipulation of the x[i].name and x[i].disease arguments leads to a stack-based buffer overflow. This attack must be approached locally, and the exploit has been disclosed to the public.

Recommendations For code-projects Simple Hospital Management System version 1.0, consider disabling the Add function of the Add Information component until a patch is available to prevent exploitation of the buffer overflow vulnerability. Restrict access to the Add Information component to minimize the risk of exploitation. Avoid using the x[i].name and x[i].disease arguments in the affected function until the issue is resolved.

Exploit

Fix

Buffer Overflow

Stack Overflow

Memory Corruption

Weakness Enumeration

CWE-119

CWE-121

CWE-787

Related Identifiers

CVE-2025-4499

Affected Products

Code-Projects Hospital Management System

References · 12

• 🔥 https://github.com/zzzxc643/cve/blob/main/Hospital%20Management%20System.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-4499 · Security Note
• https://osv.dev/vulnerability/CVE-2025-4499 · Vendor Advisory
• https://t.me/cvetracker/23542 · Telegram Post
• https://vuldb.com/?submit.567109 · Note
• https://code-projects.org · Note
• https://t.me/cvedetector/25006 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1921196954270200288 · Twitter Post
• https://t.me/cvenotify/121639 · Telegram Post
• https://vuldb.com/?id.308215 · Note
• https://vuldb.com/?ctiid.308215 · Note
• https://twitter.com/CVEnew/status/1921167579122471095 · Twitter Post