CVE-2022-43361

Senayan Library Management System v9.4.2 was discovered to contain a cross-site scripting XSS vulnerability via the component popchart.php...

CVE-2022-43362

Senayan Library Management System v9.4.2 was discovered to contain a SQL injection vulnerability via the collType parameter at loanbyclass.php...

CVE-2022-43362

Senayan Library Management System v9.4.2 contains a SQL injection vulnerability in the loan_by_class.php endpoint via the collType parameter. Public details identify the affected software and vulnerable component, with CVSS v3.1 impact metrics indicating High severity (7.2) and a NETWORK attack v...

CVE-2022-43362

Senayan Library Management System v9.4.2 was discovered to contain a SQL injection vulnerability via the collType parameter at loanbyclass.php...

CVE-2022-38292

SLiMS Senayan Library Management System v9.4.2 was discovered to contain multiple Server-Side Request Forgeries via the components /bibliography/marcsru.php and /bibliography/z3950sru.php...

CVE-2022-38292

SLiMS Senayan Library Management System v9.4.2 was discovered to contain multiple Server-Side Request Forgeries via the components /bibliography/marcsru.php and /bibliography/z3950sru.php...

Cross site scripting

SLiMS Senayan Library Management System v9.4.2 was discovered to contain a cross-site scripting XSS vulnerability via the Search function. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search bar...

CVE-2022-38292

CVE-2022-38292 affects SLiMS Senayan Library Management System v9.4.2. It involves multiple Server-Side Request Forgeries targeting the components /bibliography/marcsru.php and /bibliography/z3950sru.php . The root cause is SSRF in these endpoints, enabling potential unauthorized requests from th...

CVE-2022-38291

SLiMS Senayan Library Management System v9.4.2 was discovered to contain a cross-site scripting XSS vulnerability via the Search function. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search bar...

CVE-2022-38291

SLiMS Senayan Library Management System v9.4.2 was discovered to contain a cross-site scripting XSS vulnerability via the Search function. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search bar...

CVE-2022-37794

In Library Management System 1.0 the /card/in-card.php file idno parameters are vulnerable to SQL injection...

CVE-2022-37794

In Library Management System 1.0 the /card/in-card.php file idno parameters are vulnerable to SQL injection...

CVE-2022-37794

In Library Management System 1.0 the /card/in-card.php file idno parameters are vulnerable to SQL injection...

Sql injection

In Library Management System 1.0 the /card/in-card.php file idno parameters are vulnerable to SQL injection...

Library Management System SQL注入漏洞

Library Management System is a library management system with QR code attendance and automatic library card generation by King Albaracin Personal Developer. A security vulnerability exists in the idno parameter of the /card/in-card.php file in version 1.0 of the Library Management System, which c...

PT-2022-24344 · Unknown · Slims Senayan Library Management System

Name of the Vulnerable Software and Affected Versions: SLiMS Senayan Library Management System version 9.4.2 Description: The issue concerns multiple Server-Side Request Forgeries in the SLiMS Senayan Library Management System. The components /bibliography/marcsru.php and /bibliography/z3950sru.p...

PT-2022-24343 · Unknown · Slims Senayan Library Management System

Name of the Vulnerable Software and Affected Versions: SLiMS Senayan Library Management System version 9.4.2 Description: The issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search function. This enables the execution of malicious code on th...

CVE-2022-37794

CVE-2022-37794 affects Library Management System 1.0. The /card/in-card.php endpoint with the id_no parameter is vulnerable to SQL injection due to unsafeguarded input handling, enabling potential impact to confidentiality, integrity, and availability (per NVD: CVSS 3.1 base score 9.8). No remedi...

CVE-2022-37794

In Library Management System 1.0 the /card/in-card.php file idno parameters are vulnerable to SQL injection...

PT-2022-24073 · Unknown · Library Management System

Name of the Vulnerable Software and Affected Versions: Library Management System version 1.0 Description: The issue concerns SQL injection vulnerability in the /card/in-card.php file, specifically affecting the id no parameters. This allows for potential exploitation by injecting malicious SQL...