CVE-2025-4062
Last modified
CVE-2025-4062 is a high-severity vulnerability rated 7.8/10 on the CVSS scale. A vulnerability has been found in code-projects Theater Seat Booking System 1.0 and classified as critical. Affected by this vulnerability is the function cancel. EPSS estimates a 0.27% chance of exploitation in the next 30 days.
Description
A vulnerability has been found in code-projects Theater Seat Booking System 1.0 and classified as critical. Affected by this vulnerability is the function cancel. The manipulation of the argument cancelcustomername leads to stack-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Fabian | Theater Seat Booking System | 1.0 |
References
- https://code-projects.org/Product
- https://vuldb.com/?ctiid.306499Permissions Required, VDB Entry
- https://vuldb.com/?id.306499Third Party Advisory, VDB Entry
- https://vuldb.com/?submit.559452Third Party Advisory, VDB Entry
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2025-4062?
How severe is CVE-2025-4062?
How do I fix CVE-2025-4062?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-4061A vulnerability, which was classified as critical, was found…7.8
- CVE-2025-40615Reflected Cross-Site Scripting (XSS) vulnerability in Bookgy…6.1
- CVE-2025-40616Reflected Cross-Site Scripting (XSS) vulnerability in Bookgy…6.1
- CVE-2025-40617SQL injection vulnerability in Bookgy. This vulnerability co…9.8
- CVE-2025-40618SQL injection vulnerability in Bookgy. This vulnerability co…9.8
- CVE-2025-40619Bookgy does not provide for proper authorisation control in …7.5
- CVE-2025-40620SQL injection in TCMAN's GIM v11. This vulnerability allows …9.8
- CVE-2025-40621SQL injection in TCMAN's GIM v11. This vulnerability allows …9.8
- CVE-2025-40622SQL injection in TCMAN's GIM v11. This vulnerability allows …9.8
- CVE-2025-40623SQL injection in TCMAN's GIM v11. This vulnerability allows …9.8
- CVE-2025-40624SQL injection in TCMAN's GIM v11. This vulnerability allows …9.8
- CVE-2025-40625Unrestricted file upload in TCMAN's GIM v11. This vulnerabil…9.8
Are you affected by CVE-2025-4062?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST