Show filters
5 Total Results
Displaying 1-5 of 5
Sort by:
Attacker Value
Unknown

CVE-2023-48893

Disclosure Date: December 01, 2023 (last updated December 31, 2023)
SLiMS (aka SENAYAN Library Management System) through 9.6.1 allows admin/modules/reporting/customs/staff_act.php SQL Injection via startDate or untilDate.
Attacker Value
Unknown

CVE-2023-48813

Disclosure Date: December 01, 2023 (last updated December 07, 2023)
Senayan Library Management Systems (Slims) 9 Bulian v9.6.1 is vulnerable to SQL Injection via admin/modules/reporting/customs/fines_report.php.
Attacker Value
Unknown

CVE-2023-45996

Disclosure Date: October 31, 2023 (last updated November 08, 2023)
SQL injection vulnerability in Senayan Library Management Systems Slims v.9 and Bulian v.9.6.1 allows a remote attacker to obtain sensitive information and execute arbitrary code via a crafted script to the reborrowLimit parameter in the member_type.php.
Attacker Value
Unknown

CVE-2023-40970

Disclosure Date: September 01, 2023 (last updated October 08, 2023)
Senayan Library Management Systems SLIMS 9 Bulian v 9.6.1 is vulnerable to SQL Injection via admin/modules/circulation/loan_rules.php.
Attacker Value
Unknown

CVE-2023-40969

Disclosure Date: September 01, 2023 (last updated October 08, 2023)
Senayan Library Management Systems SLIMS 9 Bulian v9.6.1 is vulnerable to Server Side Request Forgery (SSRF) via admin/modules/bibliography/pop_p2p.php.