Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

Bdtask — Vulnerabilities & Security Advisories 35

Browse all 35 CVE security advisories affecting Bdtask. AI-powered Chinese analysis, POCs, and references for each vulnerability.

CVE IDTitleCVSSSeverityPublished
CVE-2019-25505 Tradebox 5.4 SQL Injection via symbol Parameter — TradeboxCWE-89 7.1 High2026-03-04
CVE-2020-37106 Business Live Chat Software 1.0 - Cross-Site Request Forgery (Add Admin) — Business Live Chat SoftwareCWE-352 5.3 Medium2026-02-06
CVE-2026-1600 Bdtask Bhojon All-In-One Restaurant Management System Add-to-Cart Submission Endpoint addtocart logic error — Bhojon All-In-One Restaurant Management SystemCWE-840 4.3 Medium2026-01-29
CVE-2026-1599 Bdtask Bhojon All-In-One Restaurant Management System Checkout placeorder logic error — Bhojon All-In-One Restaurant Management SystemCWE-840 4.3 Medium2026-01-29
CVE-2026-1598 Bdtask Bhojon All-In-One Restaurant Management System User Information profile cross site scripting — Bhojon All-In-One Restaurant Management SystemCWE-79 3.5 Low2026-01-29
CVE-2026-1597 Bdtask SalesERP Administrative Endpoint improper authorization — SalesERPCWE-285 6.3 Medium2026-01-29
CVE-2025-40679 HTML injection in Isshue from Bdtask — IsshueCWE-79 7.2AIHighAI2026-01-20
CVE-2021-47769 Isshue Shopping Cart 3.5 - 'Title' Cross Site Scripting (XSS) — Isshue Shopping CartCWE-79 4.8 Medium2026-01-15
CVE-2025-13239 Bdtask/CodeCanyon Isshue Multi Store eCommerce Shopping Cart Solution submit_checkout behavioral workflow — Isshue Multi Store eCommerce Shopping Cart SolutionCWE-841 4.3 Medium2025-11-16
CVE-2025-13238 Bdtask Flight Booking Software Edit Profile edit unrestricted upload — Flight Booking SoftwareCWE-434 6.3 Medium2025-11-16
CVE-2025-13186 Bdtask/CodeCanyon Isshue Multi Store eCommerce Shopping Cart Solution manage_customer cross site scripting — Isshue Multi Store eCommerce Shopping Cart SolutionCWE-79 2.4 Low2025-11-14
CVE-2025-13185 Bdtask/CodeCanyon News365 profile unrestricted upload — News365CWE-434 4.7 Medium2025-11-14
CVE-2025-13180 Bdtask/CodeCanyon Wholesale Inventory Control and Inventory Management System edit_profile cross site scripting — Wholesale Inventory Control and Inventory Management SystemCWE-80 3.5 Low2025-11-14
CVE-2025-13179 Bdtask/CodeCanyon Wholesale Inventory Control and Inventory Management System cross-site request forgery — Wholesale Inventory Control and Inventory Management SystemCWE-352 4.3 Medium2025-11-14
CVE-2025-13178 Bdtask/CodeCanyon SalesERP User Profile edit_profile cross site scripting — SalesERPCWE-80 3.5 Low2025-11-14
CVE-2025-13177 Bdtask/CodeCanyon SalesERP cross-site request forgery — SalesERPCWE-352 4.3 Medium2025-11-14
CVE-2025-12288 Bdtask Pharmacy Management System User Profile edit_user authorization — Pharmacy Management SystemCWE-639 4.3 Medium2025-10-27
CVE-2025-12287 Bdtask Wholesale Inventory Control and Inventory Management System edit_profile sql injection — Wholesale Inventory Control and Inventory Management SystemCWE-89 4.7 Medium2025-10-27
CVE-2025-12223 Bdtask Flight Booking Software Package Information package-information unrestricted upload — Flight Booking SoftwareCWE-434 6.3 Medium2025-10-27
CVE-2025-12222 Bdtask Flight Booking Software Deposit deposit unrestricted upload — Flight Booking SoftwareCWE-434 6.3 Medium2025-10-27
CVE-2024-3151 Bdtask Multi-Store Inventory Management System Stock Movement Page cross-site request forgery — Multi-Store Inventory Management SystemCWE-352 4.3 Medium2024-04-02
CVE-2024-2998 Bdtask Multi-Store Inventory Management System Store Update Page cross site scripting — Multi-Store Inventory Management SystemCWE-79 2.4 Low2024-03-27
CVE-2024-2997 Bdtask Multi-Store Inventory Management System cross site scripting — Multi-Store Inventory Management SystemCWE-79 2.4 Low2024-03-27
CVE-2024-2996 Bdtask Multi-Store Inventory Management System Page Title cross site scripting — Multi-Store Inventory Management SystemCWE-79 2.4 Low2024-03-27
CVE-2024-2639 Bdtask Wholesale Inventory Management System session fixiation — Wholesale Inventory Management SystemCWE-384 4.3 Medium2024-03-19
CVE-2024-2317 Bdtask Hospital AutoManager Prescription Page improper authorization — Hospital AutoManagerCWE-285 3.8 Low2024-03-08
CVE-2024-2316 Bdtask Hospital AutoManager Update Bill Page cross-site request forgery — Hospital AutoManagerCWE-352 4.3 Medium2024-03-08
CVE-2024-2277 Bdtask G-Prescription Gynaecology & OBS Consultation Software Password Reset change_password_save cross-site request forgery — G-Prescription Gynaecology & OBS Consultation SoftwareCWE-352 4.3 Medium2024-03-08
CVE-2024-2276 Bdtask G-Prescription Gynaecology & OBS Consultation Software Edit Venue Page cross site scripting — G-Prescription Gynaecology & OBS Consultation SoftwareCWE-79 2.4 Low2024-03-08
CVE-2024-2275 Bdtask G-Prescription Gynaecology & OBS Consultation Software OBS Patient/Gynee Prescription cross site scripting — G-Prescription Gynaecology & OBS Consultation SoftwareCWE-79 2.4 Low2024-03-08

This page lists every published CVE security advisory associated with Bdtask. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.