Approved changes feed: RSS · Atom

cpe:2.3:a:slims:senayan_library_management_system:9.4.2:*:*:*:*:*:*:*

part: a version: 9.4.2 update: *

VendorSlims (40189cd5-dd5f-5ad5-ab03-71b228fd1ab2)
ProductSenayan Library Management System (c8b07eb7-a094-51b8-9c98-afef319cb949)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/slims/slims9_bulian purl2cpe 2026-06-01 10:17:12.689412

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-43362 vulnerable 2026-06-08 05:49:31.529920 Details available
Senayan Library Management System v9.4.2 was discovered to contain a SQL injection vulnerability via the collType parameter at loan_by_class.php.
Published: 2022-11-01T00:00:00.000Z
Updated: 2025-05-05T14:25:03.498Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-43361 vulnerable 2026-06-08 05:49:31.529415 Details available
Senayan Library Management System v9.4.2 was discovered to contain a cross-site scripting (XSS) vulnerability via the component pop_chart.php.
Published: 2022-11-01T00:00:00.000Z
Updated: 2025-05-05T14:26:22.348Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-38292 vulnerable 2026-06-08 05:47:16.089771 Details available
SLiMS Senayan Library Management System v9.4.2 was discovered to contain multiple Server-Side Request Forgeries via the components /bibliography/marcsru.php and /bibliography/z3950sru.php.
Published: 2022-09-12T20:30:55.000Z
Updated: 2024-08-03T10:54:02.274Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-38291 vulnerable 2026-06-08 05:47:16.089395 Details available
SLiMS Senayan Library Management System v9.4.2 was discovered to contain a cross-site scripting (XSS) vulnerability via the Search function. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search bar.
Published: 2022-09-12T20:30:54.000Z
Updated: 2024-08-03T10:54:02.676Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-45794 vulnerable 2026-06-08 05:36:49.448116 Details available
Slims9 Bulian 9.4.2 is affected by SQL injection in /admin/modules/system/backup.php. User data can be obtained.
Published: 2022-03-17T11:16:56.000Z
Updated: 2024-08-04T04:54:30.585Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-45793 vulnerable 2026-06-08 05:36:49.447818 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-45792 vulnerable 2026-06-08 05:36:49.447441 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.