Bdtask has 2 CVEs on record between 2021 and 2026. The median CVSS is 5.9 (medium).

CVEs per month

Last 12 months, by publish date

1125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/091026/10

Exploited share: 0% vs 1% corpus
Median CVSS: 5.9
Publish → KEV: —
Last 90 days: 0 prev 0

Weakness classes

Products

Tradebox 1
multi-store 1

Follow Bdtask:RSS feed Save a search →Embed badge ↗

Total CVEs

Critical

CISA KEV

Exploited

Worst active — by depth score

CVE-2019-25505High· 7.1Tradebox 5.4 SQL Injection via symbol Parameter51
CVE-2020-36012Medium· 4.8Stored XSS vulnerability in BDTASK Multi-Store Inventory Management System 1.0 allows a local admin to inject arbitrary code via the Customer Name Field.27

Bdtask vulnerabilities

CVEs affecting Bdtask, newest first. Open any entry for full detail, references, and exploit status.

2 CVEsRSS

CVE-2019-25505High· 7.1PoC

7mo ago

Tradebox 5.4 SQL Injection via symbol Parameter

Tradebox 5.4 contains an SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the symbol parameter. Attackers can send POST requests to the monthly_deposit endpoint …

▾ MidnightBdtask · TradeboxEPSS 0.29%via CVEORG

CVE-2020-36012Medium· 4.8

5y ago

Stored XSS vulnerability in BDTASK Multi-Store Inventory Management System 1.0 allows a local admin to inject arbitrary code via the Customer Name Field.

▾ Sunlitbdtask · multi-storeEPSS 0.56%via NVD