22 matches found
CVE-2026-10155: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in Bdtask Multi-Store Inventory Management System 1.0. The impacted element is the function accountsreportsearch of the file application/modules/accounts/controllers/Accounts.php of the component Accounts Report Handler. Performing a manipulation of the argument dtpToDat...
CVE-2026-10172: Unrestricted Upload of File with Dangerous Type
A security flaw has been discovered in Bdtask Multi-Store Inventory Management System 1.0. The affected element is the function Upload of the file application/modules/dashboard/controllers/Module.php of the component Component Module. The manipulation of the argument module results in unrestricte...
CVE
CVE-PENDING: Bdtask Multi-Store Inventory Management System 1...
EUVD-2024-27936
Malicious code in bioql PyPI...
EUVD-2022-33423
Malicious code in bioql PyPI...
CVE-2024-3151: Cross-Site Request Forgery (CSRF)
A vulnerability, which was classified as problematic, was found in Bdtask Multi-Store Inventory Management System up to 20240325. Affected is an unknown function of the file /stockmovment/stockmovment/delete/ of the component Stock Movement Page. The manipulation leads to cross-site request...
CVE-2024-2998: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in Bdtask Multi-Store Inventory Management System up to 20240320. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Store Update Page. The manipulation of the argument Store Name/Store Address leads to cross site...
PT-2024-23175 · Unknown · Bdtask Multi-Store Inventory Management System
Name of the Vulnerable Software and Affected Versions: Bdtask Multi-Store Inventory Management System versions up to 20240320 Description: A problematic issue was found in the Store Update Page component of the Bdtask Multi-Store Inventory Management System. The manipulation of the Store Name and...
CVE-2024-2997: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in Bdtask Multi-Store Inventory Management System up to 20240320. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation of the argument Category Name/Model Name/Brand Name/Unit Name leads to cross site scripting...
CVE-2024-2996: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in Bdtask Multi-Store Inventory Management System up to 20240320. It has been classified as problematic. Affected is an unknown function of the component Page Title Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The...
PT-2024-23172 · Unknown · Bdtask Multi-Store Inventory Management System
Name of the Vulnerable Software and Affected Versions: Bdtask Multi-Store Inventory Management System versions up to 20240320 Description: A vulnerability was found in the system, affecting an unknown functionality. The manipulation of the Category Name, Model Name, Brand Name, or Unit Name...
Multi Store Inventory Management System授权问题漏洞
Multi Store Inventory Management System is a multi-store inventory management system. version 1.0 of Multi Store Inventory Management System is vulnerable to an authorization issue. An attacker can exploit this vulnerability to perform an account takeover via a specially crafted POST request...
Cross site request forgery (csrf)
Multi Store Inventory Management System v1.0 allows attackers to perform an account takeover via a crafted POST request...
CVE-2022-28993
The CVE-2022-28993 entry concerns Multi Store Inventory Management System v1.0 with an authorization issue that enables account takeover via a crafted POST request. Affected component is the web application’s access control logic; root cause is not explicitly detailed across sources, but multiple...
CVE-2022-28991
CVE-2022-28991 affects Multi Store Inventory Management System v1.0. The described vulnerability is an information disclosure that could allow attackers to access sensitive files. The provided documents do not specify the root cause, exploit details, or a remediation/fix. No exploitation status i...
Multi Store Inventory Management System 安全漏洞
Multi Store Inventory Management System is a multi-store inventory management system. version 1.0 of Multi Store Inventory Management System contains an information disclosure vulnerability that could be exploited by attackers to access sensitive files...
CVE-2022-28991: Direct Request
Multi Store Inventory Management System v1.0 was discovered to contain an information disclosure vulnerability which allows attackers to access sensitive files...
CVE-2022-28993: Missing Authorization
Multi Store Inventory Management System v1.0 allows attackers to perform an account takeover via a crafted POST request...
Multi Store Inventory Management System 1.0 Information Disclosure
Exploit Title: Multi Store Inventory Management System - Information Disclosure Date: 04/04/2022 Exploit Author: Saud Alenazi Vendor Homepage: https://www.bdtask.com/ Software Link: https://www.campcodes.com/projects/php/complete-multi-store-inventory-management-system-in-php-mysql/ Version: 1.0...