Kmkalam24

**Name of the Vulnerable Software and Affected Versions** unilogies/bumsys versions prior to 2.2.0 **Description** The issue is related to SQL Injection in the GitHub repository unilogies/bumsys. **Recommendations** For versions prior to 2.2.0, update to version 2.2.0 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** unilogies/bumsys versions prior to 2.2.0 **Description** The issue is related to Cross-site Scripting (XSS) - Stored, which occurs when an application receives input from a user and stores it, allowing an attacker to inject malicious scripts. This can lead to unauthorized actions on behalf of the user. The estimated number of potentially affected devices worldwide is not specified. There is no information about real-world incidents where this issue was exploited. **Recommendations** For versions prior to 2.2.0, update to version 2.2.0 or later to resolve the issue. As a temporary workaround, consider restricting user input to minimize the risk of exploitation. Avoid using potentially vulnerable API endpoints until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** bumsys versions prior to 2.2.0 **Description** The issue concerns external control of file name or path in the GitHub repository unilogies/bumsys. **Recommendations** For versions prior to 2.2.0, update to version 2.2.0 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** unilogies/bumsys versions prior to 2.0.2 **Description** The issue is related to SQL Injection. **Recommendations** For versions prior to 2.0.2, update to version 2.0.2 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** unilogies/bumsys versions prior to 2.0.2 **Description** The issue is related to improper restriction of rendered UI layers or frames. **Recommendations** For versions prior to 2.0.2, update to version 2.0.2 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** unilogies/bumsys versions prior to 1.0.3-beta **Description** The issue concerns an unrestricted upload of a file with a dangerous type. **Recommendations** For versions prior to 1.0.3-beta, update to version 1.0.3-beta or later to resolve the issue.