Vulnerability · Published May 10, 2025 · Assigned by VulDB
CVE-2025-4497code-projects Simple Banking System Sign In buffer overflow
Medium 5.3
In plain English
A medium-severity buffer overflow in Simple Banking System from code-projects. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 34% of all known vulnerabilities).
Severity (CVSS 3.1)5.3Medium
Exploit odds (30 days)0.4%top 66.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
A vulnerability was found in code-projects Simple Banking System up to 1.0. It has been rated as critical. This issue affects some unknown processing of the component Sign In. The manipulation of the argument password2 leads to buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| code-projects | Simple Banking System | 1.0 |
Weakness: CWE-120, CWE-119 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
References
- VDB-308213 | code-projects Simple Banking System Sign In buffer overflow vdb-entry, technical-description
- VDB-308213 | CTI Indicators (IOB, IOC, IOA) signature, permissions-required
- Submit #567082 | Banking_System Buffer Overflow in Password Handling Function v1.0 Buffer Overflow third-party-advisory
- https://github.com/zzzxc643/cve/blob/main/Banking_System.md exploit
- https://code-projects.org/ product