Records9All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9
Exploited now
unilogies records in CISA KEVNo unilogies vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority HIGH 73
Cross-Site Request Forgery (CSRF) in GitHub repository unilogies/bumsys prior to 2.1.1.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.0043 · Published 2023-05-05 · Fixed in 2.1.1 CWE-352
Priority HIGH 73
PHP Remote File Inclusion in GitHub repository unilogies/bumsys prior to 2.1.1.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01914 · Published 2023-05-05 · Fixed in 2.1.1 CWE-98
Priority HIGH 71
Unrestricted Upload of File with Dangerous Type in GitHub repository unilogies/bumsys prior to v1.0.3-beta.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.05911 · Published 2023-01-26 · Fixed in v1.0.3-beta CWE-434
Priority HIGH 67
External Control of File Name or Path in GitHub repository unilogies/bumsys prior to 2.2.0.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.29134 · Published 2023-05-05 · Fixed in 2.2.0 CWE-73
Priority HIGH 65
SQL Injection in GitHub repository unilogies/bumsys prior to 2.2.0.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00891 · Published 2023-05-22 · Fixed in 2.2.0 CWE-89
Priority MEDIUM 64
SQL Injection in GitHub repository unilogies/bumsys prior to v2.0.2.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00751 · Published 2023-03-13 · Fixed in v2.0.2 CWE-89
Priority MEDIUM 62
Improper Restriction of Rendered UI Layers or Frames in GitHub repository unilogies/bumsys prior to v2.0.2.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.01411 · Published 2023-03-13 · Fixed in v2.0.2 CWE-1021
Priority MEDIUM 58
Cross-site Scripting (XSS) - Stored in GitHub repository unilogies/bumsys prior to 2.2.0.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.0037 · Published 2023-05-05 · Fixed in 2.2.0 CWE-79
Priority MEDIUM 58
Cross-site Scripting (XSS) - Stored in GitHub repository unilogies/bumsys prior to v2.0.1.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00479 · Published 2023-02-24 · Fixed in v2.0.1 CWE-79
Open these records in search →