Bdtask vulnerabilities
We track 11 vulnerabilities in Bdtask products across 11 products. 11 are rated high or critical, and none are known to be exploited. The most recent was published on January 29, 2026.
Latest Bdtask vulnerabilities
- 8.8 High severity
SalesERP: Incorrect Privilege Assignment
A vulnerability has been found in Bdtask SalesERP up to 20260116. This issue affects some unknown processing of the component Administrative Endpoint. Such manipulation of the argument ci_session leads to improper authorization. The attack may be performed fro
- 7.5 High severity
A security vulnerability has been detected in Bdtask/CodeCanyon Isshue Multi Store eCommerce…
A security vulnerability has been detected in Bdtask/CodeCanyon Isshue Multi Store eCommerce Shopping Cart Solution 5. Affected by this issue is some unknown functionality of the file /submit_checkout. Such manipulation of the argument order_total_amount/cart_
- 8.8 High severity
Flight Booking Software: Unrestricted Upload of File with Dangerous Type
A weakness has been identified in Bdtask Flight Booking Software 4. Affected by this vulnerability is an unknown functionality of the file /agent/profile/edit of the component Edit Profile Page. This manipulation causes unrestricted upload. The attack may be i
- 7.2 High severity
News365: Unrestricted Upload of File with Dangerous Type
A security flaw has been discovered in Bdtask/CodeCanyon News365 up to 7.0.3. This affects an unknown function of the file /admin/dashboard/profile. The manipulation of the argument profile_image/banner_image results in unrestricted upload. The attack can be l
- 8.8 High severity
SalesERP: Cross-Site Request Forgery
A vulnerability was detected in Bdtask/CodeCanyon SalesERP up to 20250728. This affects an unknown part. The manipulation results in cross-site request forgery. The attack can be executed remotely. The exploit is now public and may be used. The vendor was cont
- 8.8 High severity
Pharmacy Management System: Authorization Bypass Through User-Controlled Key
A vulnerability was detected in Bdtask Pharmacy Management System up to 9.4. Affected is an unknown function of the file /user/edit_user/ of the component User Profile Handler. Performing manipulation results in authorization bypass. Remote exploitation of the
- 7.2 High severity
Wholesale Inventory Control and Inventory…: Improper Neutralization of Special Elements used in an SQL Command
A security vulnerability has been detected in Bdtask Wholesale Inventory Control and Inventory Management System up to 20251013. This impacts an unknown function of the file /Admin_dashboard/edit_profile. Such manipulation of the argument first_name/last_name
- 8.8 High severity
Flight Booking Software: Unrestricted Upload of File with Dangerous Type
A vulnerability was detected in Bdtask Flight Booking Software up to 3.1. This affects an unknown part of the file /b2c/package-information of the component Package Information Module. The manipulation results in unrestricted upload. The attack can be launched
- 8.8 High severity
Flight Booking Software: Unrestricted Upload of File with Dangerous Type
A security vulnerability has been detected in Bdtask Flight Booking Software up to 3.1. Affected by this issue is some unknown functionality of the file /admin/transaction/deposit of the component Deposit Handler. The manipulation leads to unrestricted upload.
- 9.1 Critical severity
Hospital AutoManager: Improper Authorization
A vulnerability was found in Bdtask Hospital AutoManager up to 20240227 and classified as problematic. This issue affects some unknown processing of the file /prescription/prescription/delete/ of the component Prescription Page. The manipulation leads to impro
- 7.5 High severity
Multi Store Inventory Management System: Direct Request
Multi Store Inventory Management System v1.0 was discovered to contain an information disclosure vulnerability which allows attackers to access sensitive files.