CVE-2025-12287: Bdtask Wholesale Inventory Control and Inventory Management System edit_profile sql injection
A security vulnerability has been detected in Bdtask Wholesale Inventory Control and Inventory Management System up to 20251013. This impacts an unknown function of the file /Admindashboard/editprofile. Such manipulation of the argument firstname/lastname leads to sql injection. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-12287?
CVE-2025-12287 has a high severity due to its potential for SQL injection attacks.
How do I fix CVE-2025-12287?
To fix CVE-2025-12287, update Bdtask Wholesale Inventory Control and Inventory Management System to the latest version beyond 20251013.
What types of attacks can CVE-2025-12287 facilitate?
CVE-2025-12287 can facilitate SQL injection attacks, allowing unauthorized database access.
Which file is affected by CVE-2025-12287?
CVE-2025-12287 affects the file /Admin_dashboard/edit_profile within the Bdtask application.
What are the implications of exploiting CVE-2025-12287?
Exploiting CVE-2025-12287 could result in unauthorized access to sensitive information within the database.