Approved changes feed: RSS · Atom

cpe:2.3:a:bdtask:multi_store_inventory_management_system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorBdtask (59fedb6e-3a79-5d6b-9825-116d620b5d82)
ProductMulti Store Inventory Management System (5d45f5df-0c5b-5f0e-8dbb-4d6f1aab7f91)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-3151 vulnerable 2026-06-03 14:56:23.591002 Bdtask Multi-Store Inventory Management System Stock Movement Page cross-site request forgery
MEDIUM (4.3)
A vulnerability, which was classified as problematic, was found in Bdtask Multi-Store Inventory Management System up to 20240325. Affected is an unknown function of the file /stockmovment/stockmovment/delete/ of the component Stock Movement Page. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-258924. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-04-02T17:00:04.919Z
Updated: 2025-02-27T20:23:39.774Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2998 vulnerable 2026-06-03 14:55:36.723232 Bdtask Multi-Store Inventory Management System Store Update Page cross site scripting
LOW (2.4)
A vulnerability was found in Bdtask Multi-Store Inventory Management System up to 20240320. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Store Update Page. The manipulation of the argument Store Name/Store Address leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-258200. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-03-27T20:31:06.107Z
Updated: 2024-08-01T19:32:42.517Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2997 vulnerable 2026-06-03 14:55:36.722787 Bdtask Multi-Store Inventory Management System cross site scripting
LOW (2.4)
A vulnerability was found in Bdtask Multi-Store Inventory Management System up to 20240320. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation of the argument Category Name/Model Name/Brand Name/Unit Name leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-258199. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-03-27T20:31:04.490Z
Updated: 2024-08-01T19:32:42.909Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2996 vulnerable 2026-06-03 14:55:36.720183 Bdtask Multi-Store Inventory Management System Page Title cross site scripting
LOW (2.4)
A vulnerability was found in Bdtask Multi-Store Inventory Management System up to 20240320. It has been classified as problematic. Affected is an unknown function of the component Page Title Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-258198 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-03-27T20:00:08.232Z
Updated: 2024-08-01T19:32:42.494Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.