Senayan Library Management System
Approved changes feed: RSS · Atom
cpe:2.3:a:slims:senayan_library_management_system:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Slims (40189cd5-dd5f-5ad5-ab03-71b228fd1ab2) |
|---|---|
| Product | Senayan Library Management System (c8b07eb7-a094-51b8-9c98-afef319cb949) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/slims/slims9_bulian |
purl2cpe | 2026-06-01 10:17:12.689387 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-25288 |
vulnerable | 2026-06-08 06:31:22.730109 |
Details available
SLIMS (Senayan Library Management Systems) 9 Bulian v9.6.1 is vulnerable to SQL Injection via pop-scope-vocabolary.php.
Published: 2024-02-21T00:00:00.000Z
Updated: 2024-08-16T16:36:21.791Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-50805 |
vulnerable | 2026-06-08 05:52:03.612939 |
Senayan Library Management System 9.0.0 - SQL Injection
HIGH (8.2)
Senayan Library Management System 9.0.0 contains a SQL injection vulnerability in the 'class' parameter that allows attackers to inject malicious SQL queries. Attackers can exploit the vulnerability by submitting crafted payloads to manipulate database queries and potentially extract sensitive information.
Published: 2026-01-13T22:51:39.894Z
Updated: 2026-03-05T01:29:21.443Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-12584 |
vulnerable | 2026-06-08 05:08:47.079952 |
Details available
There is no CSRF mitigation in SLiMS 8 Akasia through 8.3.1. Also, an entire user profile (including the password) can be updated without sending the current password. This allows remote attackers to trick a user into changing to an attacker-controlled password, a complete account takeover, via the passwd1 and passwd2 fields in an admin/modules/system/app_user.php changecurrent=true operation.
Published: 2017-08-06T03:00:00.000Z
Updated: 2024-09-17T04:14:08.461Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.