CVE-2026-10172 - Bdtask Multi-Store Inventory Management System Component Module.php upload unrestricted upload

Back Back to CVE browser

MEDIUM

Bdtask Multi-Store Inventory Management System Component Module.php upload unrestricted upload

Published May 31, 2026

5.3

MEDIUM

CVSS 4.0

EPSS 0.21%

Description

A security flaw has been discovered in Bdtask Multi-Store Inventory Management System 1.0. The affected element is the function Upload of the file application/modules/dashboard/controllers/Module.php of the component Component Module. The manipulation of the argument module results in unrestricted upload. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks.

Affected products

Vendor Bdtask Product Multi-Store Inventory Management System Default
n/a
- Version
  1.0
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Bdtask

Multi-Store Inventory Management System

n/a

Version	Status	Constraints
1.0	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-284

CWE-434

Unrestricted Upload of File

References (5)

https://github.com/kevin57545/CVE/blob/main/bdtask-multi-store-rce.md
exploit
https://vuldb.com/cve/CVE-2026-10172
third-party-advisory
https://vuldb.com/submit/819418
third-party-advisory
https://vuldb.com/vuln/367429
vdb-entrytechnical-description
https://vuldb.com/vuln/367429/cti
signaturepermissions-required

Link	Providers	Tags
https://github.com/kevin57545/CVE/blob/main/bdtask-multi-store-rce.md		exploit
https://vuldb.com/cve/CVE-2026-10172		third-party-advisory
https://vuldb.com/submit/819418		third-party-advisory
https://vuldb.com/vuln/367429		vdb-entrytechnical-description
https://vuldb.com/vuln/367429/cti		signaturepermissions-required