Approved changes feed: RSS · Atom

cpe:2.3:a:bdtask:business_live_chat_software:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorBdtask (59fedb6e-3a79-5d6b-9825-116d620b5d82)
ProductBusiness Live Chat Software (80fcf0c2-9963-5492-b958-461ea5b21b01)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-37106 vulnerable 2026-06-03 14:42:40.776449 Business Live Chat Software 1.0 - Cross-Site Request Forgery (Add Admin)
MEDIUM (5.3)
Business Live Chat Software 1.0 contains a cross-site request forgery vulnerability that allows attackers to change user account roles without authentication. Attackers can craft a malicious HTML form to modify user privileges by submitting a POST request to the user creation endpoint with administrative access parameters.
Published: 2026-02-06T23:14:05.412Z
Updated: 2026-02-17T17:03:46.927Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.