CVE-2025-26200

A SQL injection vulnerability exists in SLIMS version 9.6.1 within the visitor_report_day.php component. The root cause is the improper handling of the month parameter, which allows a remote attacker to escalate privileges . To mitigate this risk, it is recommended to disable the visitor report d...

CVE-2025-26200

SQL injection in SLIMS v.9.6.1 allows a remote attacker to escalate privileges via the month parameter in the visitorreportday.php component...

CVE-2025-26200

SQL injection in SLIMS v.9.6.1 allows a remote attacker to escalate privileges via the month parameter in the visitorreportday.php component...

CVE-2025-22980

A SQL Injection vulnerability exists in Senayan Library Management System SLiMS 9 Bulian 9.6.1 via the tempLoanID parameter in the loan form on /admin/modules/circulation/loan.php...

SLiMS CMS 2.0 SQL Injection

==================================================================================================================================== | Title : SLiMS CMS v2.0 Sql injection Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 125.0.1 64 bits | | Vendor ...

CVE-2024-25288

SLIMS Senayan Library Management Systems 9 Bulian v9.6.1 is vulnerable to SQL Injection via pop-scope-vocabolary.php...

Sql injection

SLIMS Senayan Library Management Systems 9 Bulian v9.6.1 is vulnerable to SQL Injection via pop-scope-vocabolary.php...

CVE-2024-25288

SLIMS Senayan Library Management Systems 9 Bulian v9.6.1 is vulnerable to SQL Injection via pop-scope-vocabolary.php...

CVE-2024-25288

SLIMS Senayan Library Management Systems 9 Bulian v9.6.1 is vulnerable to SQL Injection via pop-scope-vocabolary.php...

CVE-2024-25288

SLIMS Senayan Library Management Systems 9 Bulian v9.6.1 is vulnerable to SQL Injection via pop-scope-vocabolary.php...

SLiMS 9 Bulian Security Vulnerability

SLiMS 9 Bulian is a free and open source software from the SLiMS community in Indonesia. It is used for library resource management e.g. books, journals, digital files and other library materials and administration. A security vulnerability exists in SLiMS 9 Bulian version v9.6.1, which stems fro...

CVE-2024-25288

SLIMS (Senayan Library Management Systems) 9 Bulian v9.6.1 is vulnerable to SQL Injection via the pop-scope-vocabolary.php file. This vulnerability allows for potential exploitation of the database. While no specific patch version is currently listed as a fix, it is recommended to restrict access...

CVE-2023-48893

SLiMS aka SENAYAN Library Management System through 9.6.1 allows admin/modules/reporting/customs/staffact.php SQL Injection via startDate or untilDate...

CVE-2023-48893

SLiMS aka SENAYAN Library Management System through 9.6.1 allows admin/modules/reporting/customs/staffact.php SQL Injection via startDate or untilDate...

CVE-2023-48813

Senayan Library Management Systems Slims 9 Bulian v9.6.1 is vulnerable to SQL Injection via admin/modules/reporting/customs/finesreport.php...

CVE-2023-48813

Senayan Library Management Systems Slims 9 Bulian v9.6.1 is vulnerable to SQL Injection via admin/modules/reporting/customs/finesreport.php...

Sql injection

SLiMS aka SENAYAN Library Management System through 9.6.1 allows admin/modules/reporting/customs/staffact.php SQL Injection via startDate or untilDate...

Sql injection

Senayan Library Management Systems Slims 9 Bulian v9.6.1 is vulnerable to SQL Injection via admin/modules/reporting/customs/finesreport.php...

CVE-2023-48893

SLiMS aka SENAYAN Library Management System through 9.6.1 allows admin/modules/reporting/customs/staffact.php SQL Injection via startDate or untilDate...

CVE-2023-48813

CVE-2023-48813 affects Senayan Library Management System (Slims) 9 Bulian v9.6.1. A SQL Injection vulnerability exists in admin/modules/reporting/customs/fines_report.php due to unsafe handling of input. The issue is exploitable via that endpoint, with a high impact (C/H/I/A = high as per CVSS) a...