Vulnerability · Published Apr 16, 2025 · Assigned by VulDB
CVE-2025-3728SourceCodester Simple Hotel Booking System login buffer overflow
Medium 5.3
In plain English
A medium-severity buffer overflow in Simple Hotel Booking System from SourceCodester. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 27% of all known vulnerabilities).
Severity (CVSS 3.1)5.3Medium
Exploit odds (30 days)0.3%top 73.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A vulnerability classified as critical was found in SourceCodester Simple Hotel Booking System 1.0. This vulnerability affects the function Login. The manipulation of the argument uname leads to buffer overflow. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| SourceCodester | Simple Hotel Booking System | 1.0 |
Weakness: CWE-120, CWE-119 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
References
- VDB-305074 | SourceCodester Simple Hotel Booking System login buffer overflow vdb-entry, technical-description
- VDB-305074 | CTI Indicators (IOB, IOC, IOA) signature, permissions-required
- Submit #553627 | SourceCodester Simple Hotel Booking System V1.0 Buffer Overflow third-party-advisory
- https://github.com/eeeee-vul/CVE/issues/3 exploit, issue-tracking
- https://www.sourcecodester.com/ product