bumsys SQL注入漏洞

bumsys is an open source project called Business Management System by unilogies individual developers. A SQL injection vulnerability exists in bumsys versions prior to 2.2.0, which stems from an SQL injection in ajaxdata.php...

WS-2023-0133

In unilogies/bumsys before 2.2.0 there exists an SQL injection affecting the edition parameter located in the file core/ajax/ajaxdata.php...

WS-2023-0059

In unilogies/bumsys, there exists an SQL injection affecting the customerid parameter located in the file core/ajax/ajaxdata.php...