Medium severity · published May 30, 2026
CVE-2026-10155
Bdtask Multi-Store Inventory Management System Accounts Report Accounts.php accounts_report_search sql injection
4.7
CVSS
0.2%
EPSS
No
On KEV
Description
A vulnerability was found in Bdtask Multi-Store Inventory Management System 1.0. The impacted element is the function accounts_report_search of the file application/modules/accounts/controllers/Accounts.php of the component Accounts Report Handler. Performing a manipulation of the argument dtpToDate results in sql injection. The attack is possible to be carried out remotely. The exploit has been made public and could be used.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
Attack vector
Network
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
Low
Integrity
Low
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 11% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MI
Multi-Store Inventory Management System · Bdtask
1.0 · source: vendor
Affected product
MI
Multi-Store Inventory Management System
Bdtask
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-10155
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-10155
github.com
https://github.com/kevin57545/CVE/blob/main/README.md
vuldb.com
https://vuldb.com/submit/818863
vuldb.com
https://vuldb.com/vuln/367408
vuldb.com
https://vuldb.com/vuln/367408/cti
More from Multi-Store Inventory Management System
9.8
CVE-2022-28993
Multi Store Inventory Management System v1.0 allows attackers to perform an account takeover via a crafted POST request
7.5
CVE-2022-28991
Multi Store Inventory Management System v1.0 was discovered to contain an information disclosure vulnerability which allows attackers to access sensitive files
6.3
CVE-2026-10172
Bdtask Multi-Store Inventory Management System Component Module.php upload unrestricted upload
5.4
CVE-2024-2998
A vulnerability was found in Bdtask Multi-Store Inventory Management System up to 20240320
5.4
CVE-2024-2997
A vulnerability was found in Bdtask Multi-Store Inventory Management System up to 20240320