CVE-2023-2551 PHP Remote File Inclusion in unilogies/bumsys

PHP Remote File Inclusion in GitHub repository unilogies/bumsys prior to 2.1.1...

CVE-2023-2552 Cross-Site Request Forgery (CSRF) in unilogies/bumsys

Cross-Site Request Forgery CSRF in GitHub repository unilogies/bumsys prior to 2.1.1...

CVE-2023-2551 PHP Remote File Inclusion in unilogies/bumsys

PHP Remote File Inclusion in GitHub repository unilogies/bumsys prior to 2.1.1...

CVE-2023-2552 Cross-Site Request Forgery (CSRF) in unilogies/bumsys

Cross-Site Request Forgery CSRF in GitHub repository unilogies/bumsys prior to 2.1.1...

CVE-2023-2553 Cross-site Scripting (XSS) - Stored in unilogies/bumsys

Cross-site Scripting XSS - Stored in GitHub repository unilogies/bumsys prior to 2.2.0...

CVE-2023-2554 External Control of File Name or Path in unilogies/bumsys

External Control of File Name or Path in GitHub repository unilogies/bumsys prior to 2.2.0...

PT-2023-20140 · Unilogies · Bumsys

Name of the Vulnerable Software and Affected Versions: unilogies/bumsys versions prior to 2.2.0 Description: The issue is related to Cross-site Scripting XSS - Stored, which occurs when an application receives input from a user and stores it, allowing an attacker to inject malicious scripts. This...

PT-2023-20148 · Bumsys · Bumsys

Name of the Vulnerable Software and Affected Versions: bumsys versions prior to 2.2.0 Description: The issue concerns external control of file name or path in the GitHub repository unilogies/bumsys. Recommendations: For versions prior to 2.2.0, update to version 2.2.0 or later to resolve the issu...

CVE-2023-2554 External Control of File Name or Path in unilogies/bumsys

External Control of File Name or Path in GitHub repository unilogies/bumsys prior to 2.2.0...

CVE-2023-2552

Cross-Site Request Forgery CSRF in GitHub repository unilogies/bumsys prior to 2.1.1...

CVE-2023-2553

Cross-site Scripting XSS - Stored in GitHub repository unilogies/bumsys prior to 2.2.0...

CVE-2023-2554

External Control of File Name or Path in GitHub repository unilogies/bumsys prior to 2.2.0...

CVE-2023-2551

PHP Remote File Inclusion in GitHub repository unilogies/bumsys prior to 2.1.1...

CVE-2023-2554: External Control of File Name or Path

External Control of File Name or Path in GitHub repository unilogies/bumsys prior to 2.2.0...

CVE-2023-2552: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF in GitHub repository unilogies/bumsys prior to 2.1.1...

CVE-2023-2553: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS - Stored in GitHub repository unilogies/bumsys prior to 2.2.0...

CVE-2023-2551: Improper Control of Filename for Include/Require Statement in PHP Program

PHP Remote File Inclusion in GitHub repository unilogies/bumsys prior to 2.1.1...

PT-2023-20132

Name of the Vulnerable Software and Affected Versions unilogies/bumsys versions prior to 2.1.1 Description The issue is related to Cross-Site Request Forgery CSRF in the GitHub repository unilogies/bumsys. CSRF is an attack that tricks a user into performing unintended actions on a web applicatio...

CVE-2023-2553 Cross-site Scripting (XSS) - Stored in unilogies/bumsys

Cross-site Scripting XSS - Stored in GitHub repository unilogies/bumsys prior to 2.2.0...

CVE-2023-2551

CVE-2023-2551 affects the PHP-based Bumsys (unilogies/bumsys) with versions prior to 2.1.1. The vulnerability stems from an API endpoint that processes file paths and allows local files to be included, enabling remote code execution via crafted requests to the api route. The root cause is unsafe ...