101 matches found
CVE-2026-107082
Slims Senayan Library Management Systems 9 Bulian 9.8.0 allows an authenticated staff user to perform SQL injection via the opachide and promoted GET parameters of admin/modules/bibliography/index.php, because escapestring is applied but the values are concatenated into an unquoted numeric SQL...
CVE-2026-107082
SLiMS (Senayan Library Management Systems) 9 Bulian 9.8.0 is vulnerable to SQL injection via the opac_hide and promoted GET parameters in admin/modules/bibliography/index.php. The root cause is that while escape_string() is applied, values are concatenated into an unquoted numeric SQL context , a...
CVE-2026-107082
Slims Senayan Library Management Systems 9 Bulian 9.8.0 allows an authenticated staff user to perform SQL injection via the opachide and promoted GET parameters of admin/modules/bibliography/index.php, because escapestring is applied but the values are concatenated into an unquoted numeric SQL...
EUVD-2026-104518
Slims Senayan Library Management Systems 9 Bulian 9.8.0 allows an authenticated staff user to perform SQL injection via the opachide and promoted GET parameters of admin/modules/bibliography/index.php, because escapestring is applied but the values are concatenated into an unquoted numeric SQL...
Exploit for CVE-2026-107082
CVE-2026-107082 — SQL Injection via opachide / promoted G...
EUVD-2018-4609
Malware in sbrugna...
EUVD-2010-1386
Malware in sbrugna...
EUVD-2010-2020
Malware in sbrugna...
EUVD-2006-4101
Malware in sbrugna...
EUVD-2009-3470
Malware in sbrugna...
EUVD-2009-3461
Malware in sbrugna...
EUVD-2006-4100
Malware in sbrugna...
CVE-2010-2000
Cross-site scripting XSS vulnerability in the Bibliography Biblio module 5.x through 5.x-1.17 and 6.x through 6.x-1.9 for Drupal allows remote authenticated users, with "administer biblio" privileges, to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than...
CVE-2010-1358
Cross-site scripting XSS vulnerability in the Bibliography Biblio module 5.x through 5.x-1.17 and 6.x through 6.x-1.9 for Drupal allows remote authenticated users, with "administer biblio" privileges, to inject arbitrary web script or HTML via unspecified vectors...
CVE-2025-45820
Slims Senayan Library Management Systems 9 Bulian 9.6.1 is vulnerable to SQL Injection in admin/modules/bibliography/popauthoredit.php...
CVE-2025-45820
Slims Senayan Library Management Systems 9 Bulian 9.6.1 is vulnerable to SQL Injection in admin/modules/bibliography/popauthoredit.php...
CVE-2025-45820: Improper Neutralization of Special Elements used in an SQL Command
Slims Senayan Library Management Systems 9 Bulian 9.6.1 is vulnerable to SQL Injection in admin/modules/bibliography/popauthoredit.php...
SLiMS 9 Bulian Security Vulnerabilities
SLiMS 9 Bulian is a free and open source software from the SLiMS community in Indonesia. It is used for library resource management e.g. books, journals, digital files and other library materials and administration. A security vulnerability exists in SLiMS 9 Bulian version 9.6.1, which stems from...
CVE-2025-45820
Slims (Senayan Library Management Systems) version 9 Bulian 9.6.1 is vulnerable to an SQL Injection flaw located in the admin/modules/bibliography/pop_author_edit.php file. This vulnerability allows for potential exploitation of the database via the affected script. While no specific patch or new...
