CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

NVD•added 2023/03/13 5:15 a.m.•34 views

CVE-2023-1361

SQL Injection in GitHub repository unilogies/bumsys prior to v2.0.2...

7.2CVSS7AI score0.00751EPSS

Exploits1References2

Vulnrichment•added 2023/03/13 12:0 a.m.•9 views

CVE-2023-1361 SQL Injection in unilogies/bumsys

SQL Injection in GitHub repository unilogies/bumsys prior to v2.0.2...

7.2CVSS7AI score0.00751EPSS

Exploits1References2

CVE•added 2023/03/13 12:0 a.m.•49 views

CVE-2023-1361

CVE-2023-1361 : SQL Injection in the open-source project unilogies/bumsys prior to v2.0.2. The vulnerability stems from core/ajax/ajax_data.php where customer_id is sanitized but interpolated into an unquoted numeric context, allowing injected SQL (example PoC in Huntr shows a time-based sleep). ...

7.2CVSS7AI score0.00751EPSS

Exploits1References2Affected Software1