CVE-2025-12222 | Bdtask Flight Booking Software up to 3.1 Deposit deposit unrestricted upload

October 25, 2025 Yanac

A vulnerability identified as critical has been detected in Bdtask Flight Booking Software up to 3.1. Affected by this issue is some unknown functionality of the file /admin/transaction/deposit of the component Deposit Handler. The manipulation leads to unrestricted upload.

This vulnerability is documented as CVE-2025-12222. The attack can be initiated remotely. Additionally, an exploit exists.

The vendor was contacted early about this disclosure but did not respond in any way.VulDB Recent EntriesRead More