CVE-2025-45820

CVE-2025-45820 affects Slims (Senayan Library Management Systems) Slims 9 Bulian 9.6.1. The vulnerability is a SQL Injection in the file admin/modules/bibliography/pop_author_edit.php . The available sources consistently cite an injection flaw in that specific path/version; no details on exploit ...

CVE-2025-45818

CVE-2025-45818 affects Slims (Senayan Library Management Systems) 9 Bulian 9.6.1 via SQL injection in admin/modules/master_file/item_status.php. The vulnerability targets a web-accessible PHP script, with CVSS 3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N; impact is Confidentiality and Integrity (Low)...

CVE-2025-22980

This entry documents a SQL Injection vulnerability in Senayan Library Management System SLiMS 9 Bulian 9.6.1, exploitable via the tempLoanID parameter in the loan form at /admin/modules/circulation/loan.php. The CVSS metrics indicate a Network attack vector with Low attack complexity, requiring H...

CVE-2025-45819

CVE-2025-45819 affects Slims (Senayan Library Management Systems) version 9 Bulian 9.6.1. The issue is a SQL Injection vulnerability in the file path admin/modules/master_file/author.php, arising from inadequate input handling in that module. Documented impact in the CVE data shows low confidenti...

CVE-2023-45996

CVE-2023-45996 affects Senayan Library Management Systems Slims v9 and Bulian v9.6.1. A SQL injection occurs via a crafted script to the reborrowLimit parameter in member_type.php, enabling a remote attacker to obtain sensitive information and potentially execute arbitrary code. Supported details...

CVE-2023-48813

CVE-2023-48813 affects Senayan Library Management System (Slims) 9 Bulian v9.6.1. A SQL Injection vulnerability exists in admin/modules/reporting/customs/fines_report.php due to unsafe handling of input. The issue is exploitable via that endpoint, with a high impact (C/H/I/A = high as per CVSS) a...

CVE-2023-48893

SLiMS (SENAYAN Library Management System) 9.6.1 (Bulian) is affected by CVE-2023-48893 through an SQL Injection in admin/modules/reporting/customs/staff_act.php via startDate or untilDate. The vulnerability is due to unsafely constructed SQL queries, leading to high-severity impact (CVSS v3.1: AV...