7 matches found
CVE-2025-65233
Reflected cross-site scripting XSS in SLiMS slims9bulian before 9.6.0 via improper handling of $SERVER'PHPSELF' in index.php/sysconfig.inc.php, which allows remote attackers to execute arbitrary JavaScript in a victim's browser by supplying a crafted URL path...
EUVD-2025-14009
Malicious code in bioql PyPI...
CVE-2025-45819
Slims Senayan Library Management Systems 9 Bulian 9.6.1 is vulnerable to SQL Injection in admin/modules/masterfile/author.php...
PT-2025-20387 · Slims · Slims
Name of the Vulnerable Software and Affected Versions: Slims Senayan Library Management Systems version 9.6.1 Description: The issue is related to SQL Injection in the admin/modules/master file/author.php file. This allows for potential exploitation. No information is provided about the estimated...
CVE-2025-25403
Slims Senayan Library Management Systems 9 Bulian V9.6.1 is vulnerable to SQL Injection in admin/modules/masterfile/colltype.php...
CVE-2025-25403
Slims (Senayan Library Management Systems) 9 Bulian V9.6.1 is affected by a SQL Injection in admin/modules/master_file/coll_type.php. The root cause is unsanitized user input in SQL queries, enabling high-severity impact (CVSS 3.1: 9.8, CRITICAL) on confidentiality, integrity and availability. No...
PT-2025-18184 · Slims · Slims
Name of the Vulnerable Software and Affected Versions: Slims Senayan Library Management Systems version 9.6.1 Description: The issue is related to SQL Injection in the admin/modules/master file/coll type.php file. This allows for potential exploitation. No information is provided about the...