VULNERABILITY INTELLIGENCE

CVE-2025-3148

CVSS score3.3 LOW
EPSS probability0.24%
CISA KEVNot currently listed
Published2025-04-03
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Description

A vulnerability was found in codeprojects Product Management System 1.0 and classified as problematic. This issue affects some unknown processing of the component Login. The manipulation of the argument Str1 leads to buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.

Weakness classification

  • cna@vuldb.com: CWE-119
  • nvd@nist.gov: CWE-120

Primary references