PT-2026-45141 · Bdtask · Bdtask Multi-Store Inventory Management System

Kevin57545 · Published 2026-05-30 · Updated 2026-05-31 · CVE-2026-10155

NVD

CVSS v2.0

5.8

Medium

Base vector

AV:N/AC:L/Au:M/C:P/I:P/A:P

A vulnerability was found in Bdtask Multi-Store Inventory Management System 1.0. The impacted element is the function accounts report search of the file application/modules/accounts/controllers/Accounts.php of the component Accounts Report Handler. Performing a manipulation of the argument dtpToDate results in sql injection. The attack is possible to be carried out remotely. The exploit has been made public and could be used.

Exploit

Fix

SQL injection

Special Elements Injection

Weakness Enumeration

CWE-89

CWE-74

Related Identifiers

CVE-2026-10155

Affected Products

Bdtask Multi-Store Inventory Management System

References · 5

• 🔥 https://github.com/kevin57545/CVE/blob/main/README.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-10155 · Security Note
• https://vuldb.com/vuln/367408 · Note
• https://vuldb.com/vuln/367408/cti · Note
• https://vuldb.com/submit/818863 · Note