CVE-2025-26200

High CVSS: 7.2

SQL injection in SLIMS v.9.6.1 allows a remote attacker to escalate privileges via the month parameter in the visitor_report_day.php component.

Vendor

Product

CWE

Yayın Tarihi

2025-02-24 17:15:14

Güncelleme

2025-05-01 16:52:41

Source Identifier

cve@mitre.org

KEV Date Added

CWE-89 Senayan Library Management System HIGH Slims 2025

https://github.com/slims/slims9_bulian/issues/269 https://mebroccoli.blogspot.com/2025/02/cve2.html

Medium

CVE-2025-45818

Slims (Senayan Library Management Systems) 9 Bulian 9.6.1 is vulnerable to SQL Injection in admin/modules/master_file/it…

Medium

CVE-2025-45819

Slims (Senayan Library Management Systems) 9 Bulian 9.6.1 is vulnerable to SQL Injection in admin/modules/master_file/au…

Medium

CVE-2025-45820

Slims (Senayan Library Management Systems) 9 Bulian 9.6.1 is vulnerable to SQL Injection in admin/modules/bibliography/p…

Medium

CVE-2025-22980

A SQL Injection vulnerability exists in Senayan Library Management System SLiMS 9 Bulian 9.6.1 via the tempLoanID parame…