Browse CVEs

MEDIUM 6.5 CVE-2025-45818 Slims (Senayan Library Management Systems) 9 Bulian 9.6.1 is vulnerable to SQL Injection in admin/modules/master_file/item_status.php. Senayan Library Management System Bulian No fix yet Fix from $1,6002025-05-08 MEDIUM 6.5 CVE-2025-45819 Slims (Senayan Library Management Systems) 9 Bulian 9.6.1 is vulnerable to SQL Injection in admin/modules/master_file/author.php. Senayan Library Management System Bulian No fix yet Fix from $1,6002025-05-08 MEDIUM 6.5 CVE-2025-45820 Slims (Senayan Library Management Systems) 9 Bulian 9.6.1 is vulnerable to SQL Injection in admin/modules/bibliography/pop_author_edit.php. Senayan Library Management System Bulian No fix yet Fix from $1,6002025-05-08 HIGH 7.2 CVE-2025-26200 SQL injection in SLIMS v.9.6.1 allows a remote attacker to escalate privileges via the month parameter in the visitor_report_day.php component. Senayan Library Management System No fix yet Fix from $1,9502025-02-24 MEDIUM 6.7 CVE-2025-22980 A SQL Injection vulnerability exists in Senayan Library Management System SLiMS 9 Bulian 9.6.1 via the tempLoanID parameter in the loan form on /admi… Senayan Library Management System Bulian No fix yet Fix from $1,6002025-01-22 HIGH 8.8 CVE-2023-48813 Senayan Library Management Systems (Slims) 9 Bulian v9.6.1 is vulnerable to SQL Injection via admin/modules/reporting/customs/fines_report.php. Senayan Library Management System Bulian No fix yet Fix from $1,9502023-12-01 HIGH 8.8 CVE-2023-48893 SLiMS (aka SENAYAN Library Management System) through 9.6.1 allows admin/modules/reporting/customs/staff_act.php SQL Injection via startDate or until… Senayan Library Management System Bulian No fix yet Fix from $1,9502023-12-01 HIGH 8.8 CVE-2023-45996 SQL injection vulnerability in Senayan Library Management Systems Slims v.9 and Bulian v.9.6.1 allows a remote attacker to obtain sensitive informati… Senayan Library Management System No fix yet Fix from $1,9502023-10-31 HIGH 8.8 CVE-2023-3744 Server-Side Request Forgery vulnerability in SLims version 9.6.0. This vulnerability could allow an authenticated attacker to send requests to intern… Senayan Library Management System Mitigation only Fix from $1,9502023-10-02 HIGH 8.8 CVE-2023-40970 Senayan Library Management Systems SLIMS 9 Bulian v 9.6.1 is vulnerable to SQL Injection via admin/modules/circulation/loan_rules.php. Senayan Library Management System No fix yet Fix from $1,9502023-09-01 MEDIUM 6.1 CVE-2023-40969 Senayan Library Management Systems SLIMS 9 Bulian v9.6.1 is vulnerable to Server Side Request Forgery (SSRF) via admin/modules/bibliography/pop_p2p.p… Senayan Library Management System No fix yet Fix from $1,6002023-09-01 HIGH 7.5 CVE-2023-29850 SENAYAN Library Management System (SLiMS) Bulian v9.5.2 does not strip exif data from uploaded images. This allows attackers to obtain information su… Senayan Library Management System No fix yet Fix from $1,9502023-04-14 HIGH 7.5 CVE-2022-45019 SLiMS 9 Bulian v9.5.0 was discovered to contain a SQL injection vulnerability via the keywords parameter. Senayan Library Management System No fix yet Fix from $1,9502022-12-05 HIGH 7.2 CVE-2022-43362 Senayan Library Management System v9.4.2 was discovered to contain a SQL injection vulnerability via the collType parameter at loan_by_class.php. Senayan Library Management System No fix yet Fix from $1,9502022-11-01 CRITICAL 9.8 CVE-2022-38292 SLiMS Senayan Library Management System v9.4.2 was discovered to contain multiple Server-Side Request Forgeries via the components /bibliography/marc… Senayan Library Management System No fix yet Fix from $2,3002022-09-12 MEDIUM 6.1 CVE-2022-38291 SLiMS Senayan Library Management System v9.4.2 was discovered to contain a cross-site scripting (XSS) vulnerability via the Search function. This vul… Senayan Library Management System No fix yet Fix from $1,6002022-09-12 HIGH 7.5 CVE-2021-45793 Slims9 Bulian 9.4.2 is affected by SQL injection in lib/comment.inc.php. User data can be obtained. Senayan Library Management System No fix yet Fix from $1,9502022-03-17 HIGH 7.5 CVE-2021-45794 Slims9 Bulian 9.4.2 is affected by SQL injection in /admin/modules/system/backup.php. User data can be obtained. Senayan Library Management System No fix yet Fix from $1,9502022-03-17 HIGH 8.8 CVE-2021-45791 Slims8 Akasia 8.3.1 is affected by SQL injection in /admin/modules/bibliography/index.php, /admin/modules/membership/member_type.php, /admin/modules/… Senayan Library Management System No fix yet Fix from $1,9502022-03-17 HIGH 8.8 CVE-2017-12585 SLiMS 8 Akasia through 8.3.1 has SQL injection in admin/AJAX_lookup_handler.php (tableName and tableFields parameters), admin/AJAX_check_id.php, and … Akasia No fix yet Fix from $1,9502017-08-06 MEDIUM 6.5 CVE-2017-12586 SLiMS 8 Akasia through 8.3.1 has an arbitrary file reading issue because of directory traversal in the url parameter to admin/help.php. It can be exp… Akasia No fix yet Fix from $1,6002017-08-06