Vulnerability · Published Dec 4, 2024 · Assigned by VulDB

CVE-2024-12186code-projects Hotel Management System Available Room hotelnew.c stack-based overflow

Medium 5.3

In plain English

A medium-severity stack buffer overflow in Hotel Management System from code-projects. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 28% of all known vulnerabilities).

Severity (CVSS 3.1)5.3Medium

Exploit odds (30 days)0.3%top 71.7% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

A vulnerability was found in code-projects Hotel Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file hotelnew.c of the component Available Room Handler. The manipulation of the argument admin_entry leads to stack-based buffer overflow. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used.

Affected products (as reported)

Vendor	Product	Versions
code-projects	Hotel Management System	1.0

Weakness: CWE-121, CWE-119 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

References

VDB-286907 | code-projects Hotel Management System Available Room hotelnew.c stack-based overflow vdb-entry, technical-description
VDB-286907 | CTI Indicators (IOB, IOC, IOA) signature, permissions-required
Submit #454846 | code-projects hotel-management-system-in-c v1.0 Stack-based Buffer Overflow third-party-advisory
https://github.com/1zzan/cve/blob/main/STACK-OVERFLOW2.md exploit
https://code-projects.org/ product