Bdtask Multi-Store Inventory Management System vulnerabilities
3 known CVE vulnerabilities in Bdtask Multi-Store Inventory Management System, translated and rated.
- CVE-2026-10172Medium
Vulnerability in Bdtask Multi-Store Inventory Management System 1.0 allows unrestricted file upload by manipulating the module argument in the Upload function of the file application/modules/dashboard/controllers/Module.php.
- CVE-2026-10155Medium
Vulnerability in Bdtask Multi-Store Inventory Management System 1.0 allows SQL Injection by manipulating the dtpToDate argument in the accounts_report_search function of the file application/modules/accounts/controllers/Accounts.php.
- CVE-2020-36012Medium
A stored XSS vulnerability was found in BDTASK Multi-Store Inventory Management System 1.0. A local admin can inject arbitrary JavaScript code via the Customer Name field.

