79 matches found
bumsys 安全漏洞
bumsys is an open source project called Business Management System by unilogies individual developers. A security vulnerability exists in unilogies bumsys versions prior to v2.0.2, which stems from an improper restriction in the UI layer or framework in which the software is rendered...
PT-2023-16928 · Unilogies · Bumsys
Name of the Vulnerable Software and Affected Versions: unilogies/bumsys versions prior to 2.0.2 Description: The issue is related to SQL Injection. Recommendations: For versions prior to 2.0.2, update to version 2.0.2 or later to resolve the issue...
CVE-2023-1362 Improper Restriction of Rendered UI Layers or Frames in unilogies/bumsys
Improper Restriction of Rendered UI Layers or Frames in GitHub repository unilogies/bumsys prior to v2.0.2...
CVE-2023-1361 SQL Injection in unilogies/bumsys
SQL Injection in GitHub repository unilogies/bumsys prior to v2.0.2...
CVE-2023-1362 Improper Restriction of Rendered UI Layers or Frames in unilogies/bumsys
Improper Restriction of Rendered UI Layers or Frames in GitHub repository unilogies/bumsys prior to v2.0.2...
bumsys SQL注入漏洞
bumsys is an open source project called Business Management System by unilogies individual developers. unilogies bumsys version before v2.0.2 has a SQL injection vulnerability , the vulnerability stems from core/ajax/ajaxdata.php in the SQL injection...
PT-2023-7320 · Bumsys · Bumsys
Name of the Vulnerable Software and Affected Versions: bumsys versions prior to 2.1.1 Description: The issue is related to a PHP Remote File Inclusion vulnerability. This could allow a remote attacker to execute arbitrary code by sending specially crafted requests. Recommendations: For versions...
CVE-2023-0995
Cross-site Scripting XSS - Stored in GitHub repository unilogies/bumsys prior to v2.0.1...
Cross site scripting
Cross-site Scripting XSS - Stored in GitHub repository unilogies/bumsys prior to v2.0.1...
CVE-2023-0995
CVE-2023-0995 is a stored XSS in unilogies/bumsys prior to v2.0.1. Affected component(s): the web app handling user input stored and later displayed. Exploitability is evidenced by a PoC showing a payload in a POST to customer-support flow, triggering test. Remediation: upgrade to version 2.0.1 o...
CVE-2023-0995 Cross-site Scripting (XSS) - Stored in unilogies/bumsys
Cross-site Scripting XSS - Stored in GitHub repository unilogies/bumsys prior to v2.0.1...
PT-2023-16674 · Unilogies · Bumsys
Name of the Vulnerable Software and Affected Versions: unilogies/bumsys versions prior to 2.0.1 Description: The issue is related to Cross-site Scripting XSS - Stored. This type of attack occurs when an application stores user input and later displays it to other users without proper validation o...
CVE-2023-0995 Cross-site Scripting (XSS) - Stored in unilogies/bumsys
Cross-site Scripting XSS - Stored in GitHub repository unilogies/bumsys prior to v2.0.1...
bumsys 跨站脚本漏洞
bumsys is an open source project called Business Management System by unilogies individual developers. A cross-site scripting vulnerability exists in versions of bumsys prior to v2.0.1. Attackers use this vulnerability to execute cross-site scripting attacks...
CVE-2023-0995 Cross-site Scripting (XSS) - Stored in unilogies/bumsys
Cross-site Scripting XSS - Stored in GitHub repository unilogies/bumsys prior to v2.0.1...
CVE-2023-0455
CVE-2023-0455 affects unilogies/bumsys prior to v1.0.3-beta. Affected: the upload mechanism for shop logos (settings/shop-list) that accepts a file named profile picture.php with PHP code, indicating unrestricted upload of a dangerous file type. Root cause: insufficient validation of file type/ex...
CVE-2023-0455 Unrestricted Upload of File with Dangerous Type in unilogies/bumsys
Unrestricted Upload of File with Dangerous Type in GitHub repository unilogies/bumsys prior to v1.0.3-beta...
PT-2023-16284 · Unilogies · Bumsys
Name of the Vulnerable Software and Affected Versions: unilogies/bumsys versions prior to 1.0.3-beta Description: The issue concerns an unrestricted upload of a file with a dangerous type. Recommendations: For versions prior to 1.0.3-beta, update to version 1.0.3-beta or later to resolve the issu...