CVE-2025-45818

The Slims (Senayan Library Management Systems) 9 Bulian version 9.6.1 is vulnerable to an SQL Injection vulnerability located in the admin/modules/master_file/item_status.php file. This flaw, categorized as CWE-89 , allows for potential exploitation of the underlying database. While there is curr...

CVE-2025-45820

Slims (Senayan Library Management Systems) version 9 Bulian 9.6.1 is vulnerable to an SQL Injection flaw located in the admin/modules/bibliography/pop_author_edit.php file. This vulnerability allows for potential exploitation of the database via the affected script. While no specific patch or new...

CVE-2025-22980

A SQL Injection vulnerability exists in the Senayan Library Management System SLiMS 9 Bulian 9.6.1 . The flaw is located in the loan form at the /admin/modules/circulation/loan.php endpoint, specifically via the tempLoanID parameter. This vulnerability allows for potential SQL injection attacks a...

CVE-2025-45819

Slims (Senayan Library Management Systems) 9 Bulian version 9.6.1 is vulnerable to a SQL Injection vulnerability in the admin/modules/master_file/author.php file. This flaw allows for potential exploitation of the underlying database. While no specific patch or newer version containing a fix is c...

CVE-2023-48813

CVE-2023-48813 affects Senayan Library Management System (Slims) 9 Bulian v9.6.1. A SQL Injection vulnerability exists in admin/modules/reporting/customs/fines_report.php due to unsafe handling of input. The issue is exploitable via that endpoint, with a high impact (C/H/I/A = high as per CVSS) a...

CVE-2023-45996

CVE-2023-45996 affects Senayan Library Management Systems Slims v9 and Bulian v9.6.1. A SQL injection occurs via a crafted script to the reborrowLimit parameter in member_type.php, enabling a remote attacker to obtain sensitive information and potentially execute arbitrary code. Supported details...

CVE-2023-48893

SLiMS (SENAYAN Library Management System) 9.6.1 (Bulian) is affected by CVE-2023-48893 through an SQL Injection in admin/modules/reporting/customs/staff_act.php via startDate or untilDate. The vulnerability is due to unsafely constructed SQL queries, leading to high-severity impact (CVSS v3.1: AV...