4M3Rr0R

**Name of the Vulnerable Software and Affected Versions** automad versions prior to 2.0.0-beta.33 **Description** A remote issue exists in the Password Reset Endpoint within the `requestPasswordResetToken()` function of the `automad/src/server/Controllers/API/UserController.php` file. Manipulation of the `name-or-email` argument leads to an observable response discrepancy, which can be used to distinguish between valid and invalid users. This attack is characterized by high complexity and difficult exploitability. **Recommendations** Upgrade to version 2.0.0-beta.33.

**Name of the Vulnerable Software and Affected Versions** CodeCanyon TimeCamp Integration for CRM versions prior to 2.9 **Description** An authorization bypass exists in the Contact Information Update component due to improper processing of the `/clients/save contact` endpoint. A remote attacker can exploit this by manipulating the `contact id` argument. **Recommendations** Update CodeCanyon TimeCamp Integration for CRM to version 2.9 or later. As a temporary mitigation, restrict access to the `/clients/save contact` endpoint.

A security flaw has been discovered in BichitroGan ISP Billing Software 2025.3.20. This impacts an unknown function of the file /? route=settings/users-view/ of the component Profile Page Handler. Performing a manipulation results in cross site scripting. The attack is possible to be carried out remotely. The vendor was contacted early about this disclosure but did not respond in any way.

A weakness has been identified in BichitroGan ISP Billing Software 2025.3.20. Affected is an unknown function of the file /? route=pool/add of the component Pool List Interface. Executing a manipulation can lead to cross site scripting. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability was identified in BichitroGan ISP Billing Software 2025.3.20. This affects an unknown function of the file /? route=customers/edit/ of the component Customer Handler. Such manipulation leads to cross site scripting. The attack can be executed remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.

**Name of the Vulnerable Software and Affected Versions** BichitroGan ISP Billing Software version 2025.3.20 **Description** A flaw exists in BichitroGan ISP Billing Software that allows for improper control of resource identifiers. The issue is located within an unknown function of the file ‘/? route=settings/users-view/’ of the Endpoint component. The `ID` parameter can be manipulated, enabling remote exploitation. The exploit has been publicly released. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Bdtask Bhojon All-In-One Restaurant Management System versions up to 20260116 **Description** A business logic issue exists in the Checkout component of Bdtask Bhojon All-In-One Restaurant Management System. The issue is related to the manipulation of the `orggrandTotal`, `vat`, `service charge`, and `grandtotal` arguments within the file '/hungry/placeorder'. This manipulation can lead to business logic errors and can be exploited remotely. The exploit has been publicly disclosed. The vendor was contacted regarding this disclosure but did not respond. **Recommendations** Versions prior to 20260116 should be updated. As a temporary workaround, restrict or carefully validate the `orggrandTotal`, `vat`, `service charge`, and `grandtotal` arguments in the '/hungry/placeorder' file.

**Name of the Vulnerable Software and Affected Versions** Bdtask SalesERP versions prior to 20260116 **Description** A security issue exists in Bdtask SalesERP related to improper authorization. The issue affects processing within the Administrative Endpoint component. Manipulation of the `ci session` argument can lead to unauthorized access. The exploit has been publicly disclosed, and the vendor was informed but did not respond. **Recommendations** Update Bdtask SalesERP to a version later than 20260116.

**Name of the Vulnerable Software and Affected Versions** Bdtask Bhojon All-In-One Restaurant Management System versions prior to 20260117 **Description** A business logic error exists in the Add-to-Cart Submission Endpoint. The backend accepts user-controlled pricing values without validating them against server-side product data, allowing a remote attacker to manipulate the `price` or `allprice` arguments in a POST request to the '/hungry/addtocart' endpoint. This can result in the server processing fraudulent or reduced prices. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Bdtask Bhojon All-In-One Restaurant Management System versions prior to 20260117 **Description** A flaw exists in the User Information Module of Bdtask Bhojon All-In-One Restaurant Management System. Manipulating the `fullname` argument in the file '/dashboard/home/profile' can lead to cross site scripting. This issue is remotely exploitable. The details of the exploit have been publicly disclosed. **Recommendations** Versions prior to 20260117 should be updated. As a temporary workaround, consider restricting or carefully validating the `fullname` argument to prevent malicious input.

**Name of the Vulnerable Software and Affected Versions** Bdtask/CodeCanyon Isshue Multi Store eCommerce Shopping Cart Solution version 5 **Description** A security issue exists in Bdtask/CodeCanyon Isshue Multi Store eCommerce Shopping Cart Solution version 5. The issue involves manipulation of the argument order in the `/submit checkout` endpoint, specifically the `order total amount` and `cart total amount` parameters, leading to behavioral workflow enforcement. This manipulation can be launched remotely. The exploit has been publicly disclosed. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Bdtask Flight Booking Software version 4 **Description** A flaw exists in Bdtask Flight Booking Software version 4 that allows for unrestricted file upload through the Edit Profile Page, specifically via the `/agent/profile/edit` file. This manipulation can be initiated remotely. The exploit is publicly available. The vendor was notified but did not respond. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Bdtask/CodeCanyon Isshue Multi Store eCommerce Shopping Cart Solution versions prior to 4.1 **Description** A flaw exists in Bdtask/CodeCanyon Isshue Multi Store eCommerce Shopping Cart Solution. Manipulation of the `Search` argument in an unknown function within the file '/dashboard/Ccustomer/manage customer' can lead to cross site scripting. This attack can be initiated remotely. The details of the exploit have been publicly released. The vendor was notified but did not respond. **Recommendations** Update Bdtask/CodeCanyon Isshue Multi Store eCommerce Shopping Cart Solution to version 4.1 or later. As a temporary workaround, sanitize the `Search` parameter before processing it in the affected function within the '/dashboard/Ccustomer/manage customer' file.

**Name of the Vulnerable Software and Affected Versions** Bdtask/CodeCanyon SalesERP versions up to 20250728 **Description** A cross-site request forgery issue exists in Bdtask/CodeCanyon SalesERP. The issue affects an unspecified component and allows for remote execution of attacks. The exploit is publicly available. The vendor was notified of this issue but did not provide a response. **Recommendations** Versions up to 20250728 should be updated when a fix becomes available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Bdtask/CodeCanyon SalesERP versions up to 20250728 **Description** A security issue exists in Bdtask/CodeCanyon SalesERP. The issue is related to the User Profile Handler component and specifically affects code within the `/edit profile` file. Manipulation of the `first name`/`last name` arguments can lead to basic cross site scripting. This manipulation is possible remotely. The exploit has been published. **Recommendations** Versions prior to 20250728 should be updated. As a temporary workaround, consider restricting or carefully validating the `first name` and `last name` parameters in the `/edit profile` file.

**Name of the Vulnerable Software and Affected Versions** Bdtask/CodeCanyon Wholesale Inventory Control and Inventory Management System versions up to 20250320 **Description** A security issue exists in Bdtask/CodeCanyon Wholesale Inventory Control and Inventory Management System. The issue involves some unknown processing and allows for cross-site request forgery attacks. These attacks can be initiated remotely. The exploit for this issue has been publicly disclosed, and the vendor was notified but did not respond. **Recommendations** Versions up to 20250320 should be updated when a patch becomes available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Bdtask/CodeCanyon Wholesale Inventory Control and Inventory Management System versions up to 20250320 **Description** A cross-site scripting issue exists in Bdtask/CodeCanyon Wholesale Inventory Control and Inventory Management System. The issue is related to manipulating the `first name`/`last name` arguments in a file located at `/edit profile`. This manipulation affects an unknown function within the system and allows for remote execution of the attack. The exploit has been publicly disclosed. **Recommendations** Versions up to 20250320 should be updated to a newer, secure version when available. As a temporary workaround, consider sanitizing the `first name` and `last name` parameters before processing them in the `/edit profile` file.

**Name of the Vulnerable Software and Affected Versions** Bdtask/CodeCanyon News365 versions up to 7.0.3 **Description** A security flaw exists in Bdtask/CodeCanyon News365. The issue involves unrestricted file upload due to manipulation of the `profile image/banner image` argument within a function in the file '/admin/dashboard/profile'. This can be exploited remotely. The exploit has been publicly released. The vendor was contacted but did not respond. **Recommendations** Versions prior to 7.0.3 are affected. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Bdtask Pharmacy Management System versions prior to 9.4 **Description** A flaw exists in Bdtask Pharmacy Management System that allows for authorization bypass. This occurs through manipulation of an unknown function within the `/user/edit user/` file of the User Profile Handler component. Remote exploitation is possible, and the exploit is publicly available. The vendor was notified but did not respond. **Recommendations** Update to a version newer than 9.4.

**Name of the Vulnerable Software and Affected Versions** Bdtask Wholesale Inventory Control and Inventory Management System versions prior to 20251014 **Description** A security issue exists in Bdtask Wholesale Inventory Control and Inventory Management System. Manipulation of the `first name` and `last name` arguments within an unknown function of the file '/Admin dashboard/edit profile' can lead to SQL injection. The attack can be launched remotely. The details of the exploit have been publicly disclosed. The vendor was notified but did not respond. **Recommendations** Versions prior to 20251014 should be updated. As a temporary workaround, restrict or carefully validate input to the `first name` and `last name` arguments in the '/Admin dashboard/edit profile' file.