111 matches found
CVE-2023-2832
SQL Injection in GitHub repository unilogies/bumsys prior to 2.2.0...
Sql injection
SQL Injection in GitHub repository unilogies/bumsys prior to 2.2.0...
CVE-2023-2832 SQL Injection in unilogies/bumsys
SQL Injection in GitHub repository unilogies/bumsys prior to 2.2.0...
CVE-2023-2832
SQL Injection in GitHub repository unilogies/bumsys prior to 2.2.0...
CVE-2023-2832 SQL Injection in unilogies/bumsys
SQL Injection in GitHub repository unilogies/bumsys prior to 2.2.0...
CVE-2023-2832 SQL Injection in unilogies/bumsys
SQL Injection in GitHub repository unilogies/bumsys prior to 2.2.0...
CVE-2023-2832
CVE-2023-2832 concerns the Unilogies Bumsys project (unilogies/bumsys) with SQL injection in versions prior to 2.2.0. The vulnerability stems from building SQL queries by appending user-supplied values (customerId, empId, company_id) without proper quoting, leading to injection and potential dela...
PT-2023-21647 · Unilogies · Bumsys
Name of the Vulnerable Software and Affected Versions: unilogies/bumsys versions prior to 2.2.0 Description: The issue is related to SQL Injection in the GitHub repository unilogies/bumsys. Recommendations: For versions prior to 2.2.0, update to version 2.2.0 or later to resolve the issue...
CVE-2023-2832: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection in GitHub repository unilogies/bumsys prior to 2.2.0...
bumsys SQL注入漏洞
bumsys is an open source project called Business Management System by unilogies individual developers. A SQL injection vulnerability exists in bumsys versions prior to 2.2.0, which stems from an SQL injection in ajaxdata.php...
CVE-2023-2552
Cross-Site Request Forgery CSRF in GitHub repository unilogies/bumsys prior to 2.1.1...
CVE-2023-2553
Cross-site Scripting XSS - Stored in GitHub repository unilogies/bumsys prior to 2.2.0...
CVE-2023-2554
External Control of File Name or Path in GitHub repository unilogies/bumsys prior to 2.2.0...
Cross site scripting
Cross-site Scripting XSS - Stored in GitHub repository unilogies/bumsys prior to 2.2.0...
Remote file inclusion
PHP Remote File Inclusion in GitHub repository unilogies/bumsys prior to 2.1.1...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF in GitHub repository unilogies/bumsys prior to 2.1.1...
bumsys 安全漏洞
bumsys is an open source project called Business Management System by unilogies individual developers. A security vulnerability exists in versions of bumsys prior to 2.1.1, which stems from an api processing endpoint that is allowed to contain local files that can be used to cause remote code...
CVE-2023-2551 PHP Remote File Inclusion in unilogies/bumsys
PHP Remote File Inclusion in GitHub repository unilogies/bumsys prior to 2.1.1...
CVE-2023-2553
CVE-2023-2553 is a stored XSS in unilogies/bumsys prior to version 2.2.0. The vulnerability arises when user input (e.g., customerName) is stored and later rendered without proper escaping, enabling injected scripts as shown in PoC payloads (e.g., customerName containing ). Affected product: unil...