CVE-2024-25288

SLIMS Senayan Library Management Systems 9 Bulian v9.6.1 is vulnerable to SQL Injection via pop-scope-vocabolary.php...

CVE-2023-48813

Senayan Library Management Systems Slims 9 Bulian v9.6.1 is vulnerable to SQL Injection via admin/modules/reporting/customs/finesreport.php...

Server side request forgery (ssrf)

Senayan Library Management Systems SLIMS 9 Bulian v9.6.1 is vulnerable to Server Side Request Forgery SSRF via admin/modules/bibliography/popp2p.php...

Library Management System Code Issue Vulnerability

Library Management System is a library management system with QR code attendance and automatic generation of library card by King Albaracin Personal Developer. A security vulnerability exists in Senayan Library Management Systems SLIMS 9 Bulian v9.6.1, which stems from susceptibility to server-si...

CVE-2023-40969

CVE-2023-40969 - SSRF in SLIMS 9 Bulian 9.6.1 : Senayan Library Management Systems SLIMS 9 Bulian v9.6.1 is vulnerable to Server-Side Request Forgery via admin/modules/bibliography/pop_p2p.php. Public docs consistently identify the affected component as the endpoint pop_p2p.php under the bibliogr...

Code injection

LiveCode v9.6.1 on Windows allows local, low-privileged users to gain privileges by creating a malicious "cmd.exe" in the folder of the vulnerable LiveCode application. If the application is using LiveCode's "shell" function, it will attempt to search for "cmd.exe" in the folder of the current...

CVE-2020-26894

LiveCode v9.6.1 on Windows allows local, low-privileged users to gain privileges by creating a malicious "cmd.exe" in the folder of the vulnerable LiveCode application. If the application is using LiveCode's "shell" function, it will attempt to search for "cmd.exe" in the folder of the current...

CVE-2020-26894

Affected software: LiveCode v9.6.1 on Windows. Vulnerability: local privilege escalation via a malicious cmd.exe placed in the vulnerable app’s folder; when using LiveCode's shell(), the app may search that folder and execute cmd.exe. Root cause: insecure handling of an external executable in the...