Buffer Overflow Vulnerability in Simple Hotel Booking System by SourceCodester

CVE-2025-3728

What is CVE-2025-3728?

The Simple Hotel Booking System version 1.0 from SourceCodester is affected by a buffer overflow vulnerability in its login function. This security flaw arises from improper handling of the username input, allowing local attackers to exploit the system. By manipulating the input argument 'uname', an attacker may trigger this vulnerability, potentially leading to unauthorized access or execution of arbitrary code. The exploit has been publicly disclosed, increasing the urgency for users to address this issue.

References