Code-Projects Product Management System vulnerabilities

CVE-2025-4069 [MEDIUM] CWE-119 CVE-2025-4069: A vulnerability, which was classified as critical, has been found in code-projects Product Managemen A vulnerability, which was classified as critical, has been found in code-projects Product Management System 1.0. Affected by this issue is the function add_item. The manipulation of the argument st.productname leads to stack-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed to the public and may be used.

CVE-2025-3166 [MEDIUM] CWE-119 CVE-2025-3166: A vulnerability classified as critical was found in code-projects Product Management System 1.0. Thi A vulnerability classified as critical was found in code-projects Product Management System 1.0. This vulnerability affects the function search_item of the component Search Product Menu. The manipulation of the argument target leads to stack-based buffer overflow. Local access is required to approach this attack. The exploit has been disclosed to the

CVE-2025-3148 [MEDIUM] CWE-119 CVE-2025-3148: A vulnerability was found in codeprojects Product Management System 1.0 and classified as problemati A vulnerability was found in codeprojects Product Management System 1.0 and classified as problematic. This issue affects some unknown processing of the component Login. The manipulation of the argument Str1 leads to buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.