CVE-2023-40969: Server-Side Request Forgery (SSRF)

Senayan Library Management Systems SLIMS 9 Bulian v9.6.1 is vulnerable to Server Side Request Forgery SSRF via admin/modules/bibliography/popp2p.php...

CVE-2023-40969

Senayan Library Management Systems SLIMS 9 Bulian v9.6.1 is vulnerable to Server Side Request Forgery SSRF via admin/modules/bibliography/popp2p.php...

CVE-2023-40970

Senayan Library Management Systems SLIMS 9 Bulian v 9.6.1 is vulnerable to SQL Injection via admin/modules/circulation/loanrules.php...

CVE-2023-40970

CVE-2023-40970 affects Senayan Library Management Systems SLIMS 9 Bulian v9.6.1. The vulnerability is a SQL Injection in the endpoint admin/modules/circulation/loan_rules.php caused by unsanitized input. Documented impact is high (CVSS v3.1: 8.8; Confidentiality/Integrity/Availability all HIGH). ...

CVE-2023-29850

SENAYAN Library Management System SLiMS Bulian v9.5.2 does not strip exif data from uploaded images. This allows attackers to obtain information such as the user's geolocation and device information...

Information disclosure

SENAYAN Library Management System SLiMS Bulian v9.5.2 does not strip exif data from uploaded images. This allows attackers to obtain information such as the user's geolocation and device information...

CVE-2023-29850

SENAYAN Library Management System SLiMS Bulian v9.5.2 does not strip exif data from uploaded images. This allows attackers to obtain information such as the user's geolocation and device information...

CVE-2023-29850

SENAYAN Library Management System SLiMS Bulian v9.5.2 does not strip exif data from uploaded images. This allows attackers to obtain information such as the user's geolocation and device information...

CVE-2023-29850: Observable Discrepancy

SENAYAN Library Management System SLiMS Bulian v9.5.2 does not strip exif data from uploaded images. This allows attackers to obtain information such as the user's geolocation and device information...

CVE-2023-29850

SENAYAN Library Management System (SLiMS) Bulian v9.5.2 is affected: it does not strip EXIF data from uploaded images, allowing disclosure of information such as geolocation and device data. The underlying root cause is the failure to strip metadata in image uploads. Current connected documents d...

SLIMSV 9.5.2 - Cross-Site Scripting Vulnerability

Exploit Title: SLIMSV 9.5.2 - Cross-Site Scripting XSS Development: nu11secur1ty Vendor: https://slims.web.id/web/ Software: https://github.com/slims/slims9bulian/releases/tag/v9.5.2 Reference: https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/slims.web.id/SLIMS-9.5.2 Description...

CVE-2023-24086

SLIMS v9.5.2 was discovered to contain a reflected cross-site scripting XSS vulnerability via the component /customs/loanbyclass.php?reportView...

Cross site scripting

SLIMS v9.5.2 was discovered to contain a reflected cross-site scripting XSS vulnerability via the component /customs/loanbyclass.php?reportView...

CVE-2023-24086

SLIMS v9.5.2 was discovered to contain a reflected cross-site scripting XSS vulnerability via the component /customs/loanbyclass.php?reportView...

CVE-2023-24086

SLIMS v9.5.2 was discovered to contain a reflected cross-site scripting XSS vulnerability via the component /customs/loanbyclass.php?reportView...

CVE-2023-24086

SLIMS v9.5.2 was discovered to contain a reflected cross-site scripting XSS vulnerability via the component /customs/loanbyclass.php?reportView...

CVE-2023-24086: Improper Neutralization of Input During Web Page Generation

SLIMS v9.5.2 was discovered to contain a reflected cross-site scripting XSS vulnerability via the component /customs/loanbyclass.php?reportView...

CVE-2023-24086

SLIMS v9.5.2 is affected by a reflected Cross-Site Scripting (XSS) vulnerability in the component /customs/loan_by_class.php?reportView. The CVE-2023-24086 entry notes a reflected XSS with CVSS v3.1 properties: AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N, indicating a network-exposed vulnerability requir...

SLIMS 9.5.2 Cross Site Scripting Vulnerability

Title: SLIMS-9.5.2 - XSS Reflected - Account Exploit Development: nu11secur1ty Vendor: https://slims.web.id/web/ Software: https://github.com/slims/slims9bulian/releases/tag/v9.5.2 Reference: https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/slims.web.id/SLIMS-9.5.2 Description:...

Senayan Library Management System 9.2.2 SQL Injection Vulnerability

Title: Senayan Library Management System v9.2.2 a.k.a SLIMS 9 Multiple SQLi-Not sanitizing correctly cookie session. Author: nu11secur1ty Vendor: https://slims.web.id/web/ Software: https://github.com/slims/slims9bulian/releases/tag/v9.2.2 Reference:...