Show filters
41 Total Results
Displaying 21-30 of 41
Sort by:
Attacker Value
Unknown
CVE-2022-43361
Disclosure Date: November 01, 2022 (last updated February 24, 2025)
Senayan Library Management System v9.4.2 was discovered to contain a cross-site scripting (XSS) vulnerability via the component pop_chart.php.
0
Attacker Value
Unknown
CVE-2022-38292
Disclosure Date: September 12, 2022 (last updated February 24, 2025)
SLiMS Senayan Library Management System v9.4.2 was discovered to contain multiple Server-Side Request Forgeries via the components /bibliography/marcsru.php and /bibliography/z3950sru.php.
0
Attacker Value
Unknown
CVE-2022-38291
Disclosure Date: September 12, 2022 (last updated February 24, 2025)
SLiMS Senayan Library Management System v9.4.2 was discovered to contain a cross-site scripting (XSS) vulnerability via the Search function. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search bar.
0
Attacker Value
Unknown
CVE-2021-45794
Disclosure Date: March 17, 2022 (last updated February 23, 2025)
Slims9 Bulian 9.4.2 is affected by SQL injection in /admin/modules/system/backup.php. User data can be obtained.
0
Attacker Value
Unknown
CVE-2021-45793
Disclosure Date: March 17, 2022 (last updated February 23, 2025)
Slims9 Bulian 9.4.2 is affected by SQL injection in lib/comment.inc.php. User data can be obtained.
0
Attacker Value
Unknown
CVE-2021-45792
Disclosure Date: March 17, 2022 (last updated February 23, 2025)
Slims9 Bulian 9.4.2 is affected by Cross Site Scripting (XSS) in /admin/modules/system/custom_field.php.
0
Attacker Value
Unknown
CVE-2021-45791
Disclosure Date: March 17, 2022 (last updated February 23, 2025)
Slims8 Akasia 8.3.1 is affected by SQL injection in /admin/modules/bibliography/index.php, /admin/modules/membership/member_type.php, /admin/modules/system/user_group.php, and /admin/modules/membership/index.php through the dir parameter. It can be used by remotely authenticated librarian users.
0
Attacker Value
Unknown
CVE-2019-15112
Disclosure Date: August 21, 2019 (last updated November 27, 2024)
The wp-slimstat plugin before 4.8.1 for WordPress has XSS.
0
Attacker Value
Unknown
CVE-2015-9273
Disclosure Date: October 07, 2018 (last updated November 27, 2024)
The wp-slimstat (aka Slimstat Analytics) plugin before 4.1.6.1 for WordPress has XSS via an HTTP Referer header, or via a field associated with JavaScript-based Referer tracking.
0
Attacker Value
Unknown
CVE-2018-12658
Disclosure Date: June 22, 2018 (last updated November 26, 2024)
Reflected Cross-Site Scripting (XSS) exists in the Stock Take module in SLiMS 8 Akasia 8.3.1 via an admin/modules/stock_take/index.php?keywords= URI.
0
