8 matches found
CVE-2026-107082
Slims Senayan Library Management Systems 9 Bulian 9.8.0 allows an authenticated staff user to perform SQL injection via the opachide and promoted GET parameters of admin/modules/bibliography/index.php, because escapestring is applied but the values are concatenated into an unquoted numeric SQL...
CVE-2026-107082
Slims Senayan Library Management Systems 9 Bulian 9.8.0 allows an authenticated staff user to perform SQL injection via the opachide and promoted GET parameters of admin/modules/bibliography/index.php, because escapestring is applied but the values are concatenated into an unquoted numeric SQL...
CVE-2026-107082
SLiMS (Senayan Library Management Systems) 9 Bulian 9.8.0 is vulnerable to SQL injection via the opac_hide and promoted GET parameters in admin/modules/bibliography/index.php. The root cause is that while escape_string() is applied, values are concatenated into an unquoted numeric SQL context , a...
CVE-2026-107082
Slims Senayan Library Management Systems 9 Bulian 9.8.0 allows an authenticated staff user to perform SQL injection via the opachide and promoted GET parameters of admin/modules/bibliography/index.php, because escapestring is applied but the values are concatenated into an unquoted numeric SQL...
EUVD-2026-104518
Slims Senayan Library Management Systems 9 Bulian 9.8.0 allows an authenticated staff user to perform SQL injection via the opachide and promoted GET parameters of admin/modules/bibliography/index.php, because escapestring is applied but the values are concatenated into an unquoted numeric SQL...
SLiMS 9 Bulian security vulnerability
SLiMS 9 Bulian version 9.8.0 contains a security vulnerability. This vulnerability stems from improper handling of the opachide and promoted GET parameters in admin/modules/bibliography/index.php. Values processed by escapestring are concatenated into SQL statements containing unquoted numeric...
CVE-2026-107082: Undefined Security Weakness
Slims Senayan Library Management Systems 9 Bulian 9.8.0 allows an authenticated staff user to perform SQL injection via the opachide and promoted GET parameters of admin/modules/bibliography/index.php, because escapestring is applied but the values are concatenated into an unquoted numeric SQL...
