Bdtask has 8 CVEs on record between 2021 and 2026. 2 were published in the last 90 days. The median CVSS is 5.5 (medium). None have a confirmed exploitation report. Most affected products: Garage 24 Garage Management Software (2), flight_booking_software (2), Tradebox (1).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 5.5
- Publish → KEV
- —
- Last 90 days
- 2 prev 0
Products
- Garage 24 Garage Management Software 2
- flight_booking_software 2
- Tradebox 1
- multi-store 1
- pharmacare 1
- wholesale 1
Worst active — by depth score
CVE-2019-25505High· 7.1Tradebox 5.4 SQL Injection via symbol Parameter51CVE-2026-116384Medium· 6.3Bdtask Garage 24 Garage Management Software Backend improper authorization35CVE-2025-12223Medium· 6.3A vulnerability was detected in Bdtask Flight Booking Software up to 3.135CVE-2025-12222Medium· 6.3A security vulnerability has been detected in Bdtask Flight Booking Software up to 3.135CVE-2026-116385Low· 3.5Bdtask Garage 24 Garage Management Software Profile edit_profile cross site scripting31
Bdtask vulnerabilities
CVEs affecting Bdtask, newest first. Open any entry for full detail, references, and exploit status.
8 CVEsRSS
CVE-2026-116384Medium· 6.3Bdtask Garage 24 Garage Management Software Backend improper authorization
A weakness has been identified in Bdtask Garage 24 Garage Management Software 1.0. This vulnerability affects unknown code of the component Backend. Executing a manipulation can lead to improper authorization. The attack can be launched …
CVE-2026-116385Low· 3.5PoCBdtask Garage 24 Garage Management Software Profile edit_profile cross site scripting
A security vulnerability has been detected in Bdtask Garage 24 Garage Management Software 1.0. This issue affects some unknown processing of the file /edit_profile of the component Profile. The manipulation of the argument first_name/las…
CVE-2019-25505High· 7.1PoCTradebox 5.4 SQL Injection via symbol Parameter
Tradebox 5.4 contains an SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the symbol parameter. Attackers can send POST requests to the monthly_deposit endpoint …
CVE-2025-12288Medium· 4.3A vulnerability was detected in Bdtask Pharmacy Management System up to 9.4
A vulnerability was detected in Bdtask Pharmacy Management System up to 9.4. Affected is an unknown function of the file /user/edit_user/ of the component User Profile Handler. Performing manipulation results in authorization bypass. Rem…
CVE-2025-12287Medium· 4.7A security vulnerability has been detected in Bdtask Wholesale Inventory Control and Inventory Management System up to 20251013
A security vulnerability has been detected in Bdtask Wholesale Inventory Control and Inventory Management System up to 20251013. This impacts an unknown function of the file /Admin_dashboard/edit_profile. Such manipulation of the argumen…
CVE-2025-12223Medium· 6.3A vulnerability was detected in Bdtask Flight Booking Software up to 3.1
A vulnerability was detected in Bdtask Flight Booking Software up to 3.1. This affects an unknown part of the file /b2c/package-information of the component Package Information Module. The manipulation results in unrestricted upload. The…
CVE-2025-12222Medium· 6.3A security vulnerability has been detected in Bdtask Flight Booking Software up to 3.1
A security vulnerability has been detected in Bdtask Flight Booking Software up to 3.1. Affected by this issue is some unknown functionality of the file /admin/transaction/deposit of the component Deposit Handler. The manipulation leads …
CVE-2020-36012Medium· 4.8Stored XSS vulnerability in BDTASK Multi-Store Inventory Management System 1.0 allows a local admin to inject arbitrary code via the Customer Name Field.
Stored XSS vulnerability in BDTASK Multi-Store Inventory Management System 1.0 allows a local admin to inject arbitrary code via the Customer Name Field.