CVE-2025-4891

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

A vulnerability was found in code-projects Police Station Management System 1.0. It has been classified as critical. Affected is the function criminal::display of the file source.cpp of the component Display Record. The manipulation of the argument N leads to buffer overflow. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119 CWE-120

Affected software

No affected versions have been published.

Timeline

Published: May 18, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-489105.5Buffer overflow vulnerability in the DFile module Impact: Successful exploitation of this vulnerability may affect availability.CVE-2025-489118.2Vulnerability of improper permission assignment in the note sharing module Impact: Successful exploitation of this vulnerability may affect CVE-2025-489126.5An authenticated malicious actor using specially crafted requests could bypass row level security configuration by injecting SQL into 'sqlEx CVE-2025-489139.8If untrusted users are allowed to configure JMS for Apache CXF, previously they could use RMI or LDAP URLs, potentially leading to code exec CVE-2025-489148.6Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal COOKiES Consent Management allo CVE-2025-489158.6Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal COOKiES Consent Management allo CVE-2025-489166.5Missing Authorization vulnerability in Drupal Bookable Calendar allows Forceful Browsing.This issue affects Bookable Calendar: from 0.0.0 be CVE-2025-489175.0Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal EU Cookie Compliance (GDPR Comp CVE-2025-489188.8Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Simple Klaro allows Cross-Site CVE-2025-489195.0Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Simple Klaro allows Cross-Site CVE-2025-48927.8A vulnerability was found in code-projects Police Station Management System 1.0. It has been declared as critical. Affected by this vulnerab CVE-2025-489207.3Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal etracker allows Cross-Site Scri