Skip to main content

Vehicle Parking Management System CVE-2025-1163

MEDIUM
Buffer Overflow (CWE-119)
2025-02-11 cna@vuldb.com
4.8
CVSS 4.0 · NVD
Share

Severity by source

NVD PRIMARY
4.8 MEDIUM
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
X

Lifecycle Timeline

3
Analysis Generated
Mar 28, 2026 - 18:26 vuln.today
PoC Detected
Apr 10, 2025 - 20:25 vuln.today
Public exploit code
CVE Published
Feb 11, 2025 - 00:15 nvd
MEDIUM 4.8

DescriptionCVE.org

A vulnerability classified as critical was found in code-projects Vehicle Parking Management System 1.0. This vulnerability affects the function login of the component Authentication. The manipulation of the argument username leads to stack-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed to the public and may be used.

AnalysisAI

A vulnerability classified as critical was found in code-projects Vehicle Parking Management System 1.0. Rated medium severity (CVSS 4.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Technical ContextAI

This vulnerability is classified as Buffer Overflow (CWE-119), which allows attackers to corrupt memory to execute arbitrary code or crash the application. A vulnerability classified as critical was found in code-projects Vehicle Parking Management System 1.0. This vulnerability affects the function login of the component Authentication. The manipulation of the argument username leads to stack-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. Affected products include: Code-Projects Vehicle Parking Management System.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Use memory-safe languages or bounds-checking. Enable ASLR, DEP/NX, stack canaries. Use safe string functions.

CVE-2025-45885 CRITICAL POC
9.8 May 09

PHPGURUKUL Vehicle Parking Management System v1.13 is vulnerable to SQL injection in the /vpms/users/login.php file. Rat

CVE-2025-4705 MEDIUM POC
6.9 May 15

A vulnerability was found in PHPGurukul Vehicle Parking Management System 1.13. Rated medium severity (CVSS 6.9), this v

CVE-2025-4703 MEDIUM POC
6.9 May 15

A vulnerability has been found in PHPGurukul Vehicle Parking Management System 1.13 and classified as critical. Rated me

CVE-2025-4702 MEDIUM POC
6.9 May 15

A vulnerability, which was classified as critical, was found in PHPGurukul Vehicle Parking Management System 1.13. Rated

CVE-2025-4704 MEDIUM POC
6.9 May 15

A vulnerability was found in PHPGurukul Vehicle Parking Management System 1.13 and classified as critical. Rated medium

CVE-2021-37806 MEDIUM POC
5.9 Oct 27

An SQL Injection vulnerability exists in https://phpgurukul.com Vehicle Parking Management System affected version 1.0.

CVE-2020-23936 CRITICAL
9.8 Aug 20

PHPGurukul Vehicle Parking Management System 1.0 is vulnerable to Authentication Bypass via "Username: admin'# && Passwo

CVE-2025-7521 MEDIUM POC
5.5 Jul 13

CVE-2025-7521 is a critical SQL injection vulnerability in PHPGurukul Vehicle Parking Management System version 1.13, sp

CVE-2025-7483 MEDIUM POC
5.5 Jul 12

CVE-2025-7483 is a critical SQL injection vulnerability in PHPGurukul Vehicle Parking Management System version 1.13, sp

CVE-2025-7480 MEDIUM POC
5.5 Jul 12

CVE-2025-7480 is a critical SQL injection vulnerability in PHPGurukul Vehicle Parking Management System version 1.13, lo

CVE-2024-53365 MEDIUM POC
5.4 Nov 26

A stored cross-site scripting (XSS) vulnerability was identified in PHPGURUKUL Vehicle Parking Management System v1.13 i

CVE-2024-53364 MEDIUM POC
5.4 Dec 02

A SQL injection vulnerability was found in PHPGURUKUL Vehicle Parking Management System v1.13 in /users/view-detail.php.

Share

CVE-2025-1163 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy