CVE-2023-2551 PHP Remote File Inclusion in unilogies/bumsys

PHP Remote File Inclusion in GitHub repository unilogies/bumsys prior to 2.1.1...

CVE-2023-2551 PHP Remote File Inclusion in unilogies/bumsys

PHP Remote File Inclusion in GitHub repository unilogies/bumsys prior to 2.1.1...

PT-2023-20132

Name of the Vulnerable Software and Affected Versions unilogies/bumsys versions prior to 2.1.1 Description The issue is related to Cross-Site Request Forgery CSRF in the GitHub repository unilogies/bumsys. CSRF is an attack that tricks a user into performing unintended actions on a web applicatio...

CVE-2023-2551

CVE-2023-2551 affects the PHP-based Bumsys (unilogies/bumsys) with versions prior to 2.1.1. The vulnerability stems from an API endpoint that processes file paths and allows local files to be included, enabling remote code execution via crafted requests to the api route. The root cause is unsafe ...

WS-2023-0130

unilogies/bumsys before 2.2.0 is vulnerable to Improper Input Validation. It is possible to transfer money with a negative number, which allows an attacker to take money from another account by money transfer...

WS-2023-0131

A SQL Injection exists in expenses/ajax.php & loan-management/ajax.php in unilogies/bumsys prior to 2.2.0...

WS-2023-0125

unilogies/bumsys prior to 2.2.0 is vulnerable to Path Traversal. The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize '.../...//' doubled triple dot slash sequences that can resolve to a location that is outside ...

WS-2023-0133

In unilogies/bumsys before 2.2.0 there exists an SQL injection affecting the edition parameter located in the file core/ajax/ajaxdata.php...

WS-2023-0134

In unilogies/bumsys before 2.2.0 there exists a SQL Injection due to unsanitize parameters. Authenticated users are able to disclose the contents of the database...

WS-2023-0127

A SQL Injection was found in unilogies/bumsys before 2.1.1 that leads to code execution. This vulnerability allows the attacker to leverage a SQL injection attack in the database backup functionality to write arbitrary data to an arbitrary file on disk anywhere where the user can write. This...

CVE-2023-1361

SQL Injection in GitHub repository unilogies/bumsys prior to v2.0.2...

Sql injection

SQL Injection in GitHub repository unilogies/bumsys prior to v2.0.2...

bumsys 安全漏洞

bumsys is an open source project called Business Management System by unilogies individual developers. A security vulnerability exists in unilogies bumsys versions prior to v2.0.2, which stems from an improper restriction in the UI layer or framework in which the software is rendered...

CVE-2023-1362 Improper Restriction of Rendered UI Layers or Frames in unilogies/bumsys

Improper Restriction of Rendered UI Layers or Frames in GitHub repository unilogies/bumsys prior to v2.0.2...

CVE-2023-1362

Improper Restriction of Rendered UI Layers or Frames in GitHub repository unilogies/bumsys prior to v2.0.2...

CVE-2023-1362 Improper Restriction of Rendered UI Layers or Frames in unilogies/bumsys

Improper Restriction of Rendered UI Layers or Frames in GitHub repository unilogies/bumsys prior to v2.0.2...

CVE-2023-1361 SQL Injection in unilogies/bumsys

SQL Injection in GitHub repository unilogies/bumsys prior to v2.0.2...

PT-2023-16929 · Unilogies · Bumsys

Name of the Vulnerable Software and Affected Versions: unilogies/bumsys versions prior to 2.0.2 Description: The issue is related to improper restriction of rendered UI layers or frames. Recommendations: For versions prior to 2.0.2, update to version 2.0.2 or later to resolve the issue...

CVE-2023-1362: Improper Restriction of Rendered UI Layers or Frames

Improper Restriction of Rendered UI Layers or Frames in GitHub repository unilogies/bumsys prior to v2.0.2...

CVE-2023-1362 Improper Restriction of Rendered UI Layers or Frames in unilogies/bumsys

Improper Restriction of Rendered UI Layers or Frames in GitHub repository unilogies/bumsys prior to v2.0.2...