CVE-2021-45792

Slims9 Bulian 9.4.2 is affected by Cross Site Scripting XSS in /admin/modules/system/customfield.php...

Cross site scripting

Slims9 Bulian 9.4.2 is affected by Cross Site Scripting XSS in /admin/modules/system/customfield.php...

CVE-2021-45793

CVE-2021-45793 (Slims9 Bulian 9.4.2) is due to a SQL injection in lib/comment.inc.php. The NVD/Nuclei entries describe an SQLi that can lead to retrieving user data from the database; the Circl/RedHat entries corroborate affected software. The referenced exploit path is via the comment field, ena...

CVE-2021-45793

Slims9 Bulian 9.4.2 is affected by SQL injection in lib/comment.inc.php. User data can be obtained...

CVE-2021-45793

Slims9 Bulian 9.4.2 is affected by SQL injection in lib/comment.inc.php. User data can be obtained...

CVE-2021-45792

Slims9 Bulian 9.4.2 is affected by Cross Site Scripting XSS in /admin/modules/system/customfield.php...

CVE-2021-45792

Slims9 Bulian 9.4.2 is affected by Cross Site Scripting XSS in /admin/modules/system/customfield.php...

CVE-2021-45792

Slims9 Bulian 9.4.2 is affected by a Cross-Site Scripting (XSS) vulnerability in /admin/modules/system/custom_field.php. The root cause is a lack of filtering and escaping of user-submitted parameters. No exploitation details or patch/version fixes are provided in the connected documents; remedia...

CVE-2021-45792: Improper Neutralization of Input During Web Page Generation

Slims9 Bulian 9.4.2 is affected by Cross Site Scripting XSS in /admin/modules/system/customfield.php...

PT-2022-12409

Name of the Vulnerable Software and Affected Versions Slims9 Bulian version 9.4.2 Description The issue is related to Cross Site Scripting XSS in the "/admin/modules/system/custom field.php" API endpoint. This affects the ability to securely manage custom fields within the system. Recommendations...

Slims9 Bulian 跨站脚本漏洞

Slims9 Bulian is a free and open source software from the Indonesian Slims community. It is used for library resource management e.g. books, journals, digital files and other library materials and administration. A cross-site scripting vulnerability exists in Slims9 Bulian version 9.4.2, which...

PT-2022-12410

Name of the Vulnerable Software and Affected Versions Slims9 Bulian version 9.4.2 Description The issue affects the lib/comment.inc.php file, allowing SQL injection attacks that can result in the obtainment of user data. Recommendations For Slims9 Bulian version 9.4.2, consider restricting access...

CVE-2021-45793: Improper Neutralization of Special Elements used in an SQL Command

Slims9 Bulian 9.4.2 is affected by SQL injection in lib/comment.inc.php. User data can be obtained...

PT-2022-12411

Name of the Vulnerable Software and Affected Versions Slims9 Bulian version 9.4.2 Description The issue affects the "/admin/modules/system/backup.php" API endpoint, allowing SQL injection attacks. This can result in the unauthorized obtainment of user data. Recommendations For Slims9 Bulian versi...

CVE-2021-45794: Improper Neutralization of Special Elements used in an SQL Command

Slims9 Bulian 9.4.2 is affected by SQL injection in /admin/modules/system/backup.php. User data can be obtained...

Slims9 Bulian SQL注入漏洞

Slims9 Bulian is a free and open source software from the Indonesian Slims community. It is used for library resource management e.g. books, journals, digital files and other library materials and administration. Slims9 Bulian suffers from a SQL injection vulnerability that originates from a SQL...