Security Advisory

CVE-2026-10155

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-05-30 23:30:09
Last updated 2026-06-01 15:24:59
Assigner VulDB
CVSS score not scored
State PUBLISHED

Description

A vulnerability was found in Bdtask Multi-Store Inventory Management System 1.0. The impacted element is the function accounts_report_search of the file application/modules/accounts/controllers/Accounts.php of the component Accounts Report Handler. Performing a manipulation of the argument dtpToDate results in sql injection. The attack is possible to be carried out remotely. The exploit has been made public and could be used.