Lucene search
+L

262 matches found

Vulnrichment
Vulnrichment
•added 2023/10/31 12:00 a.m.•20 views

CVE-2023-45996

SQL injection vulnerability in Senayan Library Management Systems Slims v.9 and Bulian v.9.6.1 allows a remote attacker to obtain sensitive information and execute arbitrary code via a crafted script to the reborrowLimit parameter in the membertype.php...

8.1AI score0.01076EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2023/10/31 12:00 a.m.•12 views

SLiMS 9 Bulian Security Vulnerability

SLiMS 9 Bulian is a free and open source software from the SLiMS community in Indonesia. It is used for library resource management e.g. books, journals, digital files and other library materials and administration. A security vulnerability exists in SLiMS 9 Bulian version v.9.6.1, which stems fr...

8.8CVSS8.3AI score0.01076EPSS
SaveExploits1References3
NVD
NVD
•added 2023/10/02 2:15 p.m.•31 views

CVE-2023-3744

Server-Side Request Forgery vulnerability in SLims version 9.6.0. This vulnerability could allow an authenticated attacker to send requests to internal services or upload the contents of relevant files via the "scrapeimage.php" file in the imageURL parameter...

9.9CVSS9.4AI score0.00459EPSS
SaveExploits0References1
Prion
Prion
•added 2023/10/02 2:15 p.m.•35 views

Server side request forgery (ssrf)

Server-Side Request Forgery vulnerability in SLims version 9.6.0. This vulnerability could allow an authenticated attacker to send requests to internal services or upload the contents of relevant files via the "scrapeimage.php" file in the imageURL parameter...

6.5CVSS8.5AI score0.00459EPSS
SaveExploits0References1Affected Software1
OSV
OSV
•added 2023/10/02 1:50 p.m.•21 views

CVE-2023-3744 Server-Side Request Forgery in SLiMS

Server-Side Request Forgery vulnerability in SLims version 9.6.0. This vulnerability could allow an authenticated attacker to send requests to internal services or upload the contents of relevant files via the "scrapeimage.php" file in the imageURL parameter...

9.9CVSS7.2AI score
SaveExploits0References3
Cvelist
Cvelist
•added 2023/10/02 1:50 p.m.•34 views

CVE-2023-3744 Server-Side Request Forgery in SLiMS

Server-Side Request Forgery vulnerability in SLims version 9.6.0. This vulnerability could allow an authenticated attacker to send requests to internal services or upload the contents of relevant files via the "scrapeimage.php" file in the imageURL parameter...

9.9CVSS9.5AI score0.00459EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2023/10/02 1:50 p.m.•34 views

CVE-2023-3744 Server-Side Request Forgery in SLiMS

Server-Side Request Forgery vulnerability in SLims version 9.6.0. This vulnerability could allow an authenticated attacker to send requests to internal services or upload the contents of relevant files via the "scrapeimage.php" file in the imageURL parameter...

9.9CVSS6.8AI score0.00459EPSS
SaveExploits0References1
CVE
CVE
•added 2023/10/02 1:50 p.m.•82 views

CVE-2023-3744

CVE-2023-3744 is a Server-Side Request Forgery in SLims 9.6.0. An authenticated attacker can send requests to internal services or upload files via the imageURL parameter in the scrape_image.php endpoint, enabling potential access to internal resources. Public details consistently describe SSRF i...

9.9CVSS9.1AI score0.00459EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/02 12:00 a.m.•1 views

CVE-2023-3744: Server-Side Request Forgery (SSRF)

Server-Side Request Forgery vulnerability in SLims version 9.6.0. This vulnerability could allow an authenticated attacker to send requests to internal services or upload the contents of relevant files via the "scrapeimage.php" file in the imageURL parameter...

9.9CVSS7.8AI score0.00459EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/10/02 12:00 a.m.•15 views

SLims Code Issue Vulnerability

Slims9 Bulian is a free and open source software from the Indonesian Slims community. It is used for library resource management e.g. books, journals, digital files and other library materials and administration. A code issue vulnerability exists in SLims version 9.6.0, which stems from a...

9.9CVSS7.1AI score0.00459EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/09/19 12:00 a.m.•12 views

PT-2023-25969 · Slims · Slims

Name of the Vulnerable Software and Affected Versions: SLims version 9.6.0 Description: The issue allows an authenticated attacker to send requests to internal services or upload the contents of relevant files via the "scrape image.php" file in the imageURL parameter. This is a Server-Side Reques...

9.9CVSS8.5AI score0.00459EPSS
SaveExploits0References6
NVD
NVD
•added 2023/09/01 11:15 a.m.•37 views

CVE-2023-40969

Senayan Library Management Systems SLIMS 9 Bulian v9.6.1 is vulnerable to Server Side Request Forgery SSRF via admin/modules/bibliography/popp2p.php...

6.1CVSS6.3AI score0.0039EPSS
SaveExploits1References2
NVD
NVD
•added 2023/09/01 11:15 a.m.•21 views

CVE-2023-40970

Senayan Library Management Systems SLIMS 9 Bulian v 9.6.1 is vulnerable to SQL Injection via admin/modules/circulation/loanrules.php...

8.8CVSS9.1AI score0.00744EPSS
SaveExploits1References2
Prion
Prion
•added 2023/09/01 11:15 a.m.•21 views

Sql injection

Senayan Library Management Systems SLIMS 9 Bulian v 9.6.1 is vulnerable to SQL Injection via admin/modules/circulation/loanrules.php...

6.5CVSS9AI score0.00744EPSS
SaveExploits1References2Affected Software1
Prion
Prion
•added 2023/09/01 11:15 a.m.•30 views

Server side request forgery (ssrf)

Senayan Library Management Systems SLIMS 9 Bulian v9.6.1 is vulnerable to Server Side Request Forgery SSRF via admin/modules/bibliography/popp2p.php...

5.8CVSS6.3AI score0.0039EPSS
SaveExploits1References2Affected Software1
CVE
CVE
•added 2023/09/01 12:00 a.m.•69 views

CVE-2023-40969

CVE-2023-40969 - SSRF in SLIMS 9 Bulian 9.6.1 : Senayan Library Management Systems SLIMS 9 Bulian v9.6.1 is vulnerable to Server-Side Request Forgery via admin/modules/bibliography/pop_p2p.php. Public docs consistently identify the affected component as the endpoint pop_p2p.php under the bibliogr...

6.1CVSS6.2AI score0.0039EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/09/01 12:00 a.m.•3 views

CVE-2023-40970: Improper Neutralization of Special Elements used in an SQL Command

Senayan Library Management Systems SLIMS 9 Bulian v 9.6.1 is vulnerable to SQL Injection via admin/modules/circulation/loanrules.php...

8.8CVSS7.9AI score0.00744EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2023/09/01 12:00 a.m.•15 views

Library Management System Code Issue Vulnerability

Library Management System is a library management system with QR code attendance and automatic generation of library card by King Albaracin Personal Developer. A security vulnerability exists in Senayan Library Management Systems SLIMS 9 Bulian v9.6.1, which stems from susceptibility to server-si...

6.1CVSS7.1AI score0.0039EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2023/09/01 12:00 a.m.•49 views

CVE-2023-40969

Senayan Library Management Systems SLIMS 9 Bulian v9.6.1 is vulnerable to Server Side Request Forgery SSRF via admin/modules/bibliography/popp2p.php...

6.5AI score0.0039EPSS
SaveExploits1References2
OSV
OSV
•added 2023/09/01 12:00 a.m.•21 views

CVE-2023-40970

Senayan Library Management Systems SLIMS 9 Bulian v 9.6.1 is vulnerable to SQL Injection via admin/modules/circulation/loanrules.php...

8.4AI score
SaveExploits0References4
Rows per page
Query Builder