Vulnerability · Published May 9, 2025 · Assigned by VulDB

CVE-2025-4472code-projects Departmental Store Management System bill stack-based overflow

Medium 5.3

In plain English

A medium-severity stack buffer overflow in Departmental Store Management System from code-projects. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 45% of all known vulnerabilities).

Severity (CVSS 3.1)5.3Medium

Exploit odds (30 days)0.5%top 55.2% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

A vulnerability was found in code-projects Departmental Store Management System 1.0. It has been classified as critical. Affected is the function bill. The manipulation of the argument Item Code leads to stack-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used.

Affected products (as reported)

Vendor	Product	Versions
code-projects	Departmental Store Management System	1.0

Weakness: CWE-121, CWE-119 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

References

VDB-308094 | code-projects Departmental Store Management System bill stack-based overflow vdb-entry, technical-description
VDB-308094 | CTI Indicators (IOB, IOC, IOA) signature, permissions-required
Submit #566516 | Department Store Management System stack overflow in bill function v1.0 Buffer Overflow third-party-advisory
https://github.com/zzzxc643/cve/blob/main/Department_Store_Management_System.md exploit
https://code-projects.org/ product