Senayan Library Management System SLiMS 9 Bulian security vulnerability

The Senayan Library Management System SLiMS version 9.8.0 contains a security vulnerability. This vulnerability stems from identifier injection in the tableName and tableFields POST parameters of the admin AJAX endpoints admin/AJAXlookuphandler.php, admin/AJAXcheckid.php,...

PT-2025-42799

Name of the Vulnerable Software and Affected Versions Senayan Library Management System SLiMS 9 Bulian version 9.6.1 Description An issue exists in Senayan Library Management System SLiMS 9 Bulian version 9.6.1 that allows a remote attacker to execute arbitrary code. The issue is related to the...

CVE-2025-61488: Improper Control of Generation of Code

An issue in Senayan Library Management System SLiMS 9 Bulian v.9.6.1 allows a remote attacker to execute arbitrary code via the scrapimage.php component and the imageURL parameter...

EUVD-2025-3062

Malicious code in bioql PyPI...

CVE-2025-22980: Improper Neutralization of Special Elements used in an SQL Command

A SQL Injection vulnerability exists in Senayan Library Management System SLiMS 9 Bulian 9.6.1 via the tempLoanID parameter in the loan form on /admin/modules/circulation/loan.php...

PT-2025-4756

Name of the Vulnerable Software and Affected Versions Senayan Library Management System SLiMS 9 Bulian version 9.6.1 Description A SQL Injection issue exists in the loan form on the /admin/modules/circulation/loan.php endpoint, specifically via the tempLoanID parameter. This allows for potential...

CVE-2025-22980

A SQL Injection vulnerability exists in Senayan Library Management System SLiMS 9 Bulian 9.6.1 via the tempLoanID parameter in the loan form on /admin/modules/circulation/loan.php...

CVE-2023-29850: Observable Discrepancy

SENAYAN Library Management System SLiMS Bulian v9.5.2 does not strip exif data from uploaded images. This allows attackers to obtain information such as the user's geolocation and device information...