CVE-2026-10172 | Bdtask Multi-Store Inventory Management System 1.0 Component Module.php upload module unrestricted upload

A vulnerability described as critical has been identified in Bdtask Multi-Store Inventory Management System 1.0. The affected element is the function Upload of the file application/modules/dashboard/controllers/Module.php of the component Component Module. The manipulation of the argument module results in unrestricted upload.

This vulnerability was named CVE-2026-10172. The attack may be performed from remote. In addition, an exploit is available.