Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

8 records

Vendor: unilogies Component: Bumsys Clear all filters
TI-2023-02653 CVE-2023-2832 · GHSA-cr44-jj23-rv3c

SQL Injection in unilogies/bumsys

Priority HIGH 65

SQL Injection in GitHub repository unilogies/bumsys prior to 2.2.0.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00891 Published 2023-05-22 Fixed in 2.2.0 CWE-89
TI-2023-02386 CVE-2023-2553 · GHSA-qggq-pvf3-83gp

Cross-site Scripting (XSS) - Stored in unilogies/bumsys

Priority MEDIUM 58

Cross-site Scripting (XSS) - Stored in GitHub repository unilogies/bumsys prior to 2.2.0.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0037 Published 2023-05-05 Fixed in 2.2.0 CWE-79
TI-2023-02384 CVE-2023-2551 · GHSA-2j97-56x9-c2hp

PHP Remote File Inclusion in unilogies/bumsys

Priority HIGH 73

PHP Remote File Inclusion in GitHub repository unilogies/bumsys prior to 2.1.1.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01914 Published 2023-05-05 Fixed in 2.1.1 CWE-98
TI-2023-01286 CVE-2023-1361 · GHSA-5r4r-5p4p-vm8r

SQL Injection in unilogies/bumsys

Priority MEDIUM 64

SQL Injection in GitHub repository unilogies/bumsys prior to v2.0.2.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00751 Published 2023-03-13 Fixed in v2.0.2 CWE-89