CVE-2023-0455

概要

参考情報

• packetstormsecurity.com/files/172674/Bumsys-Business-Management-System-1.0.3-beta-Shell-Upload.html
• unilogies/bumsys commit a5beff7 · Patch
• huntr.dev/bounties/b5e9c578-1a33-4745-bf6b-e7cdb89793f7 · Exploit

bumsys のその他の脆弱性

• CVE-2023-2832高 7.2 SQL Injection in GitHub repository unilogies/bumsys prior to 2.2.0.
• CVE-2023-2554高 7.2External Control of File Name or Path in GitHub repository unilogies/bumsys prior to 2.2.0.
• CVE-2023-2553中 5.4Cross-site Scripting (XSS) - Stored in GitHub repository unilogies/bumsys prior to 2.2.0.
• CVE-2023-2552高 8.8Cross-Site Request Forgery (CSRF) in GitHub repository unilogies/bumsys prior to 2.1.1.
• CVE-2023-2551高 8.8PHP Remote File Inclusion in GitHub repository unilogies/bumsys prior to 2.1.1.