CVE-2024-3151

A vulnerability, which was classified as problematic, was found in Bdtask Multi-Store Inventory Management System up to 20240325. Affected is an unknown function of the file /stockmovment/stockmovment/delete/ of the component Stock Movement Page. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-258924. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-352

• https://drive.google.com/file/d/1oTqULJy357Z4dk85vPR_yMFXRNhwZywX/view?usp=sharingExploit
• https://vuldb.com/?ctiid.258924Permissions Required, VDB Entry
• https://vuldb.com/?id.258924Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.303898Third Party Advisory, VDB Entry
• https://drive.google.com/file/d/1oTqULJy357Z4dk85vPR_yMFXRNhwZywX/view?usp=sharingExploit
• https://vuldb.com/?ctiid.258924Permissions Required, VDB Entry
• https://vuldb.com/?id.258924Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.303898Third Party Advisory, VDB Entry

Published

Apr 2, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-3150In mintplex-labs/anything-llm, a vulnerability exists in the…8.8
• CVE-2024-31502An issue in Insurance Management System v.1.0.0 and before a…8.1
• CVE-2024-31503Incorrect access control in Dolibarr ERP CRM versions 19.0.0…7.5
• CVE-2024-31504Buffer Overflow vulnerability in SILA Embedded Solutions Gmb…7.5
• CVE-2024-31506Sourcecodester Online Graduate Tracer System v1.0 is vulnera…7.5
• CVE-2024-31507Sourcecodester Online Graduate Tracer System v1.0 is vulnera…8.6
• CVE-2024-31510An issue in Open Quantum Safe liboqs v.10.0 allows a remote …9.8
• CVE-2024-3152mintplex-labs/anything-llm is vulnerable to multiple securit…8.8
• CVE-2024-31525Peppermint Ticket Management 0.4.6 is vulnerable to Incorrec…7.2
• CVE-2024-3153mintplex-labs/anything-llm is affected by an uncontrolled re…6.5
• CVE-2024-3154A flaw was found in cri-o, where an arbitrary systemd proper…7.2
• CVE-2024-31544A stored cross-site scripting (XSS) vulnerability in Compute…5.4