CVE-2023-2832

SQL Injection in GitHub repository unilogies/bumsys prior to 2.2.0...

Sql injection

SQL Injection in GitHub repository unilogies/bumsys prior to 2.2.0...

CVE-2023-2832

CVE-2023-2832 concerns the Unilogies Bumsys project (unilogies/bumsys) with SQL injection in versions prior to 2.2.0. The vulnerability stems from building SQL queries by appending user-supplied values (customerId, empId, company_id) without proper quoting, leading to injection and potential dela...

CVE-2023-2832 SQL Injection in unilogies/bumsys

SQL Injection in GitHub repository unilogies/bumsys prior to 2.2.0...

CVE-2023-2832 SQL Injection in unilogies/bumsys

SQL Injection in GitHub repository unilogies/bumsys prior to 2.2.0...

CVE-2023-2832 SQL Injection in unilogies/bumsys

SQL Injection in GitHub repository unilogies/bumsys prior to 2.2.0...

bumsys SQL注入漏洞

bumsys is an open source project called Business Management System by unilogies individual developers. A SQL injection vulnerability exists in bumsys versions prior to 2.2.0, which stems from an SQL injection in ajaxdata.php...

PT-2023-21647 · Unilogies · Bumsys

Name of the Vulnerable Software and Affected Versions: unilogies/bumsys versions prior to 2.2.0 Description: The issue is related to SQL Injection in the GitHub repository unilogies/bumsys. Recommendations: For versions prior to 2.2.0, update to version 2.2.0 or later to resolve the issue...

CVE-2023-2552

Cross-Site Request Forgery CSRF in GitHub repository unilogies/bumsys prior to 2.1.1...

CVE-2023-2554

External Control of File Name or Path in GitHub repository unilogies/bumsys prior to 2.2.0...

CVE-2023-2553

Cross-site Scripting XSS - Stored in GitHub repository unilogies/bumsys prior to 2.2.0...

Remote file inclusion

PHP Remote File Inclusion in GitHub repository unilogies/bumsys prior to 2.1.1...

Cross site scripting

Cross-site Scripting XSS - Stored in GitHub repository unilogies/bumsys prior to 2.2.0...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF in GitHub repository unilogies/bumsys prior to 2.1.1...

CVE-2023-2554

CVE-2023-2554 affects unilogies/bumsys prior to 2.2.0. The issue is External Control of File Name or Path, enabling path traversal via user-supplied input used to build file paths in easyUpload, potentially allowing arbitrary file write. Public sources (NVD/Red Hat/Rust) rate severity as HIGH (CV...

CVE-2023-2553 Cross-site Scripting (XSS) - Stored in unilogies/bumsys

Cross-site Scripting XSS - Stored in GitHub repository unilogies/bumsys prior to 2.2.0...

CVE-2023-2552 Cross-Site Request Forgery (CSRF) in unilogies/bumsys

Cross-Site Request Forgery CSRF in GitHub repository unilogies/bumsys prior to 2.1.1...

bumsys 跨站脚本漏洞

bumsys is an open source project called Business Management System by unilogies individual developers. A cross-site scripting vulnerability exists in versions of bumsys prior to 2.2.0, which stems from a stored cross-site scripting XSS vulnerability...

bumsys 跨站请求伪造漏洞

bumsys is an open source project called Business Management System by the individual developers of unilogies. A cross-site request forgery vulnerability exists in versions of unilogies/bumsys prior to 2.1.1, which stems from the presence of cross-site request forgery...

CVE-2023-2552

CVE-2023-2552 describes a CSRF vulnerability in unilogies/bumsys prior to 2.1.1. Connected sources provide a PoC: an attacker can reach ajax.php via /accounts/ajax without CSRF token, bypassing the check, potentially enabling unauthorized actions side-channel via a crafted request. The vulnerabil...