CVE-2025-26200

SLIMS version 9.6.1 is vulnerable to a SQL injection flaw within the visitor_report_day.php component. The root cause is the improper handling of the month parameter, which allows a remote attacker to escalate privileges . While no direct patch is specified, it is recommended to disable the visit...