| शीर्षक | Bdtask Multi-Store Inventory Management System 1.0 Code Injection |
|---|
| विवरण | A remote code execution vulnerability was found in bdtask Multi-Store Inventory Management System 1.0. It affects the function upload() of the file application/modules/dashboard/controllers/Module.php of the component Module Upload Handler.
The manipulation of the argument module leads to remote code execution. The attack may be initiated remotely. Authentication is required.
The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
|
|---|
| स्रोत | ⚠️ https://github.com/kevin57545/CVE/blob/main/bdtask-multi-store-rce.md |
|---|
| उपयोगकर्ता | Kevin57545 (UID 97896) |
|---|
| सबमिशन | 05/05/2026 12:50 PM (30 दिन पहले) |
|---|
| संयम | 30/05/2026 01:06 PM (25 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 367429 [Bdtask Multi-Store Inventory Management System 1.0 Component Module.php upload module अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|