ByteOS Network

NVD Vulnerability Details :

CVE-2024-2996

Analyzed

Source-cna@vuldb.com

Published At-27 Mar, 2024 | 20:15

Updated At-12 Jun, 2025 | 23:33

A vulnerability was found in Bdtask Multi-Store Inventory Management System up to 20240320. It has been classified as problematic. Affected is an unknown function of the component Page Title Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-258198 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	3.1	2.4	LOW	CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N
Primary	3.1	4.8	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Secondary	2.0	3.3	LOW	AV:N/AC:L/Au:M/C:N/I:P/A:N

CPE Matches

bdtask>>multi_store_inventory_management_system>>Versions before 20240320(exclusive)

cpe:2.3:a:bdtask:multi_store_inventory_management_system:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-79	Secondary	cna@vuldb.com

References

Hyperlink	Source	Resource
https://drive.google.com/file/d/115tr5PJ_RmSlaLR_jLXPyJse6ojSFRxu/view?usp=drivesdk	cna@vuldb.com	Exploit
https://vuldb.com/?ctiid.258198	cna@vuldb.com	Permissions Required VDB Entry
https://vuldb.com/?id.258198	cna@vuldb.com	Third Party Advisory VDB Entry
https://vuldb.com/?submit.301376	cna@vuldb.com	Third Party Advisory VDB Entry
https://drive.google.com/file/d/115tr5PJ_RmSlaLR_jLXPyJse6ojSFRxu/view?usp=drivesdk	af854a3a-2127-422b-91ae-364da2661108	Exploit
https://vuldb.com/?ctiid.258198	af854a3a-2127-422b-91ae-364da2661108	Permissions Required VDB Entry
https://vuldb.com/?id.258198	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory VDB Entry
https://vuldb.com/?submit.301376	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory VDB Entry

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History