Advisories · Technology

unilogies/bumsys.

Every CVE that names unilogies/bumsys among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-2832 CVE record

CVSS 7.2 High

SQL Injection in unilogies/bumsys
- unilogies/bumsys
- SQL injection
Not analysed yet 22 May 2023
CVE-2023-2554 CVE record

CVSS 7.2 HighCritical · CVSS 7+ and EPSS

External Control of File Name or Path in unilogies/bumsys
- unilogies/bumsys
- Path traversal
Not analysed yet 5 May 2023
CVE-2023-2553 CVE record

CVSS 4.8 Medium

Cross-site Scripting (XSS) - Stored in unilogies/bumsys
- unilogies/bumsys
- Cross-site scripting (XSS)
Not analysed yet 5 May 2023
CVE-2023-2552 CVE record

CVSS 8.8 High

Cross-Site Request Forgery (CSRF) in unilogies/bumsys
- unilogies/bumsys
- Cross-site request forgery (CSRF)
Not analysed yet 5 May 2023
CVE-2023-2551 CVE record

CVSS 7.2 High

PHP Remote File Inclusion in unilogies/bumsys
- unilogies/bumsys
- File inclusion
Not analysed yet 5 May 2023
CVE-2023-1362 CVE record

CVSS 8.4 High

Improper Restriction of Rendered UI Layers or Frames in unilogies/bumsys
- unilogies/bumsys
- CWE-1021
Not analysed yet 13 Mar 2023
CVE-2023-1361 CVE record

CVSS 7.2 High

SQL Injection in unilogies/bumsys
- unilogies/bumsys
- SQL injection
Not analysed yet 13 Mar 2023
CVE-2023-0995 CVE record

CVSS 5.4 Medium

Cross-site Scripting (XSS) - Stored in unilogies/bumsys
- unilogies/bumsys
- Cross-site scripting (XSS)
Not analysed yet 24 Feb 2023
CVE-2023-0455 CVE record

CVSS 7.6 High

Unrestricted Upload of File with Dangerous Type in unilogies/bumsys
- unilogies/bumsys
- Unrestricted file upload
Not analysed yet 26 Jan 2023