Vulnerability index

Browse CVEs

21 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Senayan Library Management System Bulian MEDIUM 6.5
CVE-2025-45818

Slims (Senayan Library Management Systems) 9 Bulian 9.6.1 is vulnerable to SQL Injection in admin/modules/master_file/item_status.php.

No fix yet
Fix from $1,600 2025-05-08
Senayan Library Management System Bulian MEDIUM 6.5
CVE-2025-45819

Slims (Senayan Library Management Systems) 9 Bulian 9.6.1 is vulnerable to SQL Injection in admin/modules/master_file/author.php.

No fix yet
Fix from $1,600 2025-05-08
Senayan Library Management System Bulian MEDIUM 6.5
CVE-2025-45820

Slims (Senayan Library Management Systems) 9 Bulian 9.6.1 is vulnerable to SQL Injection in admin/modules/bibliography/pop_author_edit.php.

No fix yet
Fix from $1,600 2025-05-08
Senayan Library Management System HIGH 7.2
CVE-2025-26200

SQL injection in SLIMS v.9.6.1 allows a remote attacker to escalate privileges via the month parameter in the visitor_report_day.php component.

No fix yet
Fix from $1,950 2025-02-24
Senayan Library Management System Bulian MEDIUM 6.7
CVE-2025-22980

A SQL Injection vulnerability exists in Senayan Library Management System SLiMS 9 Bulian 9.6.1 via the tempLoanID parameter in the loan form on /admi…

No fix yet
Fix from $1,600 2025-01-22
Senayan Library Management System Bulian HIGH 8.8
CVE-2023-48813

Senayan Library Management Systems (Slims) 9 Bulian v9.6.1 is vulnerable to SQL Injection via admin/modules/reporting/customs/fines_report.php.

No fix yet
Fix from $1,950 2023-12-01
Senayan Library Management System Bulian HIGH 8.8
CVE-2023-48893

SLiMS (aka SENAYAN Library Management System) through 9.6.1 allows admin/modules/reporting/customs/staff_act.php SQL Injection via startDate or until…

No fix yet
Fix from $1,950 2023-12-01
Senayan Library Management System HIGH 8.8
CVE-2023-45996

SQL injection vulnerability in Senayan Library Management Systems Slims v.9 and Bulian v.9.6.1 allows a remote attacker to obtain sensitive informati…

No fix yet
Fix from $1,950 2023-10-31
Senayan Library Management System HIGH 8.8
CVE-2023-3744

Server-Side Request Forgery vulnerability in SLims version 9.6.0. This vulnerability could allow an authenticated attacker to send requests to intern…

Mitigation only
Fix from $1,950 2023-10-02
Senayan Library Management System HIGH 8.8
CVE-2023-40970

Senayan Library Management Systems SLIMS 9 Bulian v 9.6.1 is vulnerable to SQL Injection via admin/modules/circulation/loan_rules.php.

No fix yet
Fix from $1,950 2023-09-01
Senayan Library Management System MEDIUM 6.1
CVE-2023-40969

Senayan Library Management Systems SLIMS 9 Bulian v9.6.1 is vulnerable to Server Side Request Forgery (SSRF) via admin/modules/bibliography/pop_p2p.p…

No fix yet
Fix from $1,600 2023-09-01
Senayan Library Management System HIGH 7.5
CVE-2023-29850

SENAYAN Library Management System (SLiMS) Bulian v9.5.2 does not strip exif data from uploaded images. This allows attackers to obtain information su…

No fix yet
Fix from $1,950 2023-04-14
Senayan Library Management System HIGH 7.5
CVE-2022-45019

SLiMS 9 Bulian v9.5.0 was discovered to contain a SQL injection vulnerability via the keywords parameter.

No fix yet
Fix from $1,950 2022-12-05
Senayan Library Management System HIGH 7.2
CVE-2022-43362

Senayan Library Management System v9.4.2 was discovered to contain a SQL injection vulnerability via the collType parameter at loan_by_class.php.

No fix yet
Fix from $1,950 2022-11-01
Senayan Library Management System CRITICAL 9.8
CVE-2022-38292

SLiMS Senayan Library Management System v9.4.2 was discovered to contain multiple Server-Side Request Forgeries via the components /bibliography/marc…

No fix yet
Fix from $2,300 2022-09-12
Senayan Library Management System MEDIUM 6.1
CVE-2022-38291

SLiMS Senayan Library Management System v9.4.2 was discovered to contain a cross-site scripting (XSS) vulnerability via the Search function. This vul…

No fix yet
Fix from $1,600 2022-09-12
Senayan Library Management System HIGH 7.5
CVE-2021-45793

Slims9 Bulian 9.4.2 is affected by SQL injection in lib/comment.inc.php. User data can be obtained.

No fix yet
Fix from $1,950 2022-03-17
Senayan Library Management System HIGH 7.5
CVE-2021-45794

Slims9 Bulian 9.4.2 is affected by SQL injection in /admin/modules/system/backup.php. User data can be obtained.

No fix yet
Fix from $1,950 2022-03-17
Senayan Library Management System HIGH 8.8
CVE-2021-45791

Slims8 Akasia 8.3.1 is affected by SQL injection in /admin/modules/bibliography/index.php, /admin/modules/membership/member_type.php, /admin/modules/…

No fix yet
Fix from $1,950 2022-03-17
Akasia HIGH 8.8
CVE-2017-12585

SLiMS 8 Akasia through 8.3.1 has SQL injection in admin/AJAX_lookup_handler.php (tableName and tableFields parameters), admin/AJAX_check_id.php, and …

No fix yet
Fix from $1,950 2017-08-06
Akasia MEDIUM 6.5
CVE-2017-12586

SLiMS 8 Akasia through 8.3.1 has an arbitrary file reading issue because of directory traversal in the url parameter to admin/help.php. It can be exp…

No fix yet
Fix from $1,600 2017-08-06