SLiMS 9 Bulian security vulnerability

SLiMS 9 Bulian version 9.8.0 contains a security vulnerability. This vulnerability arises because the action=run GET parameter in admin/modules/circulation/loanhistorymaintenance.php executes privileged and destructive operations without using a CSRF token or POST validation. As a result, it may...

CVE-2026-107084

Slims Senayan Library Management Systems 9 Bulian 9.8.0 allows cross-site request forgery CSRF against admin/modules/circulation/loanhistorymaintenance.php because the action=run GET parameter performs privileged, destructive operations with no CSRF token or POST confirmation, leading to data los...