📦 Senayan Library Management System

CVE-2023-3744 is a Server-Side Request Forgery vulnerability in SLims 9.6.0 that allows authenticated attackers to make requests to internal services or read files via the scrape_image.php file. This ...

This SQL injection vulnerability in SLIMS v9.6.1 allows remote attackers to execute arbitrary SQL commands via the month parameter in visitor_report_day.php. Successful exploitation could lead to priv...

This SQL injection vulnerability in Senayan Library Management Systems allows remote attackers to execute arbitrary SQL commands via the reborrowLimit parameter in member_type.php. Attackers can extra...

This SQL injection vulnerability in Senayan Library Management Systems SLIMS 9 Bulian allows attackers to execute arbitrary SQL commands via the loan_rules.php module. It affects administrators who ca...

SENAYAN Library Management System (SLiMS) Bulian v9.5.2 fails to strip EXIF metadata from uploaded images, allowing attackers to extract sensitive information including user geolocation and device det...

CVE-2021-45794 is an SQL injection vulnerability in Slims9 Bulian's backup.php module that allows attackers to execute arbitrary SQL commands. This can lead to unauthorized access to sensitive user da...

Slims8 Akasia 8.3.1 contains SQL injection vulnerabilities in multiple admin modules through the dir parameter. This allows authenticated librarian users to execute arbitrary SQL commands on the datab...