Back to the CVE list

CVE-2025-13238

Improper access control in Bdtask Flight Booking Software

CVSS score

8.8

EPSS probability

%0.3

Risk score

0.0

Published

11 mo ago

Overview Public Exploits (1)Newsroom Vulnerability Timeline

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

G

4m3rr0r/PoCVulDb/issues/6

GitHub

https://github.com/4m3rr0r/PoCVulDb/issues/6

Exploit reference

Similar Vulnerabilities

8.8

CVE-2025-12288Vulnerability in Bdtask Pharmacare

Vendorbdtask Productpharmacare

Patch status unknown Public Exploits:1EPSS %011 mo ago

8.8

CVE-2025-12222Improper access control in Bdtask Flight Booking Software

Vendorbdtask Productflight booking software

Patch status unknown Public Exploits:1EPSS %011 mo ago

8.8

CVE-2025-12223Improper access control in Bdtask Flight Booking Software

Vendorbdtask Productflight booking software

Patch status unknown Public Exploits:1EPSS %011 mo ago

7.2

CVE-2025-12287SQL injection in Bdtask Wholesale

Vendorbdtask Productwholesale

Patch status unknown Public Exploits:1EPSS %011 mo ago

7.2

CVE-2025-13185Improper access control in Bdtask News365

Vendorbdtask Productnews365

Patch status unknown Public Exploits:1EPSS %011 mo ago

4.8

CVE-2020-36012Cross-site scripting in Bdtask Multi Store

Vendorbdtask Productmulti-store

Patch status unknown Public Exploits:1EPSS %15 y ago

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free key Documentation

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2025-13238"