111 matches found
CVE-2023-2832
SQL Injection in GitHub repository unilogies/bumsys prior to 2.2.0...
Sql injection
SQL Injection in GitHub repository unilogies/bumsys prior to 2.2.0...
CVE-2023-2832 SQL Injection in unilogies/bumsys
SQL Injection in GitHub repository unilogies/bumsys prior to 2.2.0...
CVE-2023-2832 SQL Injection in unilogies/bumsys
SQL Injection in GitHub repository unilogies/bumsys prior to 2.2.0...
CVE-2023-2832 SQL Injection in unilogies/bumsys
SQL Injection in GitHub repository unilogies/bumsys prior to 2.2.0...
CVE-2023-2832
CVE-2023-2832 concerns the Unilogies Bumsys project (unilogies/bumsys) with SQL injection in versions prior to 2.2.0. The vulnerability stems from building SQL queries by appending user-supplied values (customerId, empId, company_id) without proper quoting, leading to injection and potential dela...
CVE-2023-2832
SQL Injection in GitHub repository unilogies/bumsys prior to 2.2.0...
bumsys SQL注入漏洞
bumsys is an open source project called Business Management System by unilogies individual developers. A SQL injection vulnerability exists in bumsys versions prior to 2.2.0, which stems from an SQL injection in ajaxdata.php...
PT-2023-21647 · Unilogies · Bumsys
Name of the Vulnerable Software and Affected Versions: unilogies/bumsys versions prior to 2.2.0 Description: The issue is related to SQL Injection in the GitHub repository unilogies/bumsys. Recommendations: For versions prior to 2.2.0, update to version 2.2.0 or later to resolve the issue...
CVE-2023-2832: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection in GitHub repository unilogies/bumsys prior to 2.2.0...
CVE-2023-2553
Cross-site Scripting XSS - Stored in GitHub repository unilogies/bumsys prior to 2.2.0...
CVE-2023-2552
Cross-Site Request Forgery CSRF in GitHub repository unilogies/bumsys prior to 2.1.1...
CVE-2023-2554
External Control of File Name or Path in GitHub repository unilogies/bumsys prior to 2.2.0...
Remote file inclusion
PHP Remote File Inclusion in GitHub repository unilogies/bumsys prior to 2.1.1...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF in GitHub repository unilogies/bumsys prior to 2.1.1...
Cross site scripting
Cross-site Scripting XSS - Stored in GitHub repository unilogies/bumsys prior to 2.2.0...
bumsys 跨站请求伪造漏洞
bumsys is an open source project called Business Management System by the individual developers of unilogies. A cross-site request forgery vulnerability exists in versions of unilogies/bumsys prior to 2.1.1, which stems from the presence of cross-site request forgery...
bumsys 跨站脚本漏洞
bumsys is an open source project called Business Management System by unilogies individual developers. A cross-site scripting vulnerability exists in versions of bumsys prior to 2.2.0, which stems from a stored cross-site scripting XSS vulnerability...
bumsys 安全漏洞
bumsys is an open source project called Business Management System by unilogies individual developers. A security vulnerability exists in versions of bumsys prior to 2.2.0, which originates from an externally controlled file name or path...