cve/2023/CVE-2023-2551.md

### [CVE-2023-2551](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2551)
![](https://img.shields.io/static/v1?label=Product&message=unilogies%2Fbumsys&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=%3C%202.1.1%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-98%20Improper%20Control%20of%20Filename%20for%20Include%2FRequire%20Statement%20in%20PHP%20Program%20('PHP%20Remote%20File%20Inclusion')&color=brighgreen)

### Description

PHP Remote File Inclusion in GitHub repository unilogies/bumsys prior to 2.1.1.

### POC

#### Reference
- https://huntr.dev/bounties/5723613c-55c6-4f18-9ed3-61ad44f5de9c

#### Github
No PoCs found on GitHub currently.