CVE-2023-0455

Unrestricted Upload of File with Dangerous Type in unilogies/bumsys

CVSS 7.6 HIGHEPSS 5.7%CWE-434

Unrestricted Upload of File with Dangerous Type in GitHub repository unilogies/bumsys prior to v1.0.3-beta.

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L

Affected products

unilogies · unilogies/bumsys

public PoCs found — 2

cve_referencepacketstormsecurity.com/files/172674/Bumsys-Business-Management-System-1.0.3-beta-Shell-Upload.htmlunverified exploitdbwww.exploit-db.com/exploits/51492unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://packetstormsecurity.com/files/172674/Bumsys-Business-Management-System-1.0.3-beta-Shell-Upload.html https://github.com/unilogies/bumsys/commit/a5beff7868ab63bf4ec752a1102f8da033c66b28 https://huntr.dev/bounties/b5e9c578-1a33-4745-bf6b-e7cdb89793f7