PT-2025-47001 · Unknown · Bdtask/Codecanyon Wholesale Inventory Control/Inventory Management System

4M3Rr0R · Published 2025-11-14 · Updated 2025-11-24 · CVE-2025-13179

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Bdtask/CodeCanyon Wholesale Inventory Control and Inventory Management System versions up to 20250320

Description A security issue exists in Bdtask/CodeCanyon Wholesale Inventory Control and Inventory Management System. The issue involves some unknown processing and allows for cross-site request forgery attacks. These attacks can be initiated remotely. The exploit for this issue has been publicly disclosed, and the vendor was notified but did not respond.

Recommendations Versions up to 20250320 should be updated when a patch becomes available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Missing Authorization

CSRF

Weakness Enumeration

CWE-862

CWE-352

Related Identifiers

CVE-2025-13179

Affected Products

Bdtask/Codecanyon Wholesale Inventory Control/Inventory Management System

References · 10

• 🔥 https://github.com/4m3rr0r/PoCVulDb/issues/3 · Exploit
• https://osv.dev/vulnerability/CVE-2025-13179 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-13179 · Security Note
• https://vuldb.com/?id.332469 · Note
• https://twitter.com/VulmonFeeds/status/1989476208241733802 · Twitter Post
• https://t.me/CVEtracker/37363 · Telegram Post
• https://vuldb.com/?submit.684823 · Note
• https://vuldb.com/?ctiid.332469 · Note
• https://t.me/cveNotify/143772 · Telegram Post
• https://twitter.com/CVEnew/status/1989441992057893052 · Twitter Post