CVE-2025-4077

4.8 mediumEPSS 0.4%

A vulnerability classified as critical was found in code-projects School Billing System 1.0. This vulnerability affects the function searchrec. The manipulation of the argument Name leads to stack-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used.

Severity

CVSS 4.0

4.8 medium

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 31% of CVEs (scores of 2026-10-31)
CWEs: CWE-787, CWE-119, CWE-121
Published: 2025-04-29
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

fabian:school_billing_system

References

https://code-projects.org/
https://github.com/zzzxc643/cve/blob/main/SCHOOL_BILLING_SYSTEM.md
https://vuldb.com/?ctiid.306514
https://vuldb.com/?id.306514
https://vuldb.com/?submit.560534

Check your stack JSON