SLIMS

Records28All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high14CVSS 7.0–8.9

Exploited now

SLIMS records in CISA KEV

No SLIMS vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Senayan Library Management System 17 records HIGH Senayan Library Management System Bulian 7 records HIGH Akasia 2 records MEDIUM Slims7 Cendana 2 records LOW

Records

17 records in Senayan Library Management System · all components

TI-2023-24679 CVE-2023-45996 · GHSA-r9c2-5gf9-7h96

SQL injection vulnerability in Senayan Library Management Systems Slims v.9 and Bulian…

HIGH 73

SQL injection vulnerability in Senayan Library Management Systems Slims v.9 and Bulian v.9.6.1 allows a remote attacker to obtain sensitive information and execute arbitrary code via a crafted script to the reborrowLimit…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01304 Published 2023-10-31 No fix listed CWE-89

TI-2023-21634 CVE-2023-40970 · GHSA-xf94-q3jx-78q3

Senayan Library Management Systems SLIMS 9 Bulian v 9.6.1 is vulnerable to SQL Injection…

HIGH 73

Senayan Library Management Systems SLIMS 9 Bulian v 9.6.1 is vulnerable to SQL Injection via admin/modules/circulation/loan_rules.php.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00744 Published 2023-09-01 No fix listed CWE-89

TI-2023-14045 CVE-2023-29850 · GHSA-5jcc-wrcp-3mxc

SENAYAN Library Management System (SLiMS) Bulian v9.5.2 does not strip exif data from…

HIGH 72

SENAYAN Library Management System (SLiMS) Bulian v9.5.2 does not strip exif data from uploaded images.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00741 Published 2023-04-14 No fix listed CWE-203

TI-2022-22127 CVE-2022-45019 · GHSA-5fq6-9vp8-2m6g

SLiMS 9 Bulian v9.5.0 was discovered to contain a SQL injection vulnerability via the keywords parameter.

HIGH 72

SLiMS 9 Bulian v9.5.0 was discovered to contain a SQL injection vulnerability via the keywords parameter.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00794 Published 2022-12-05 No fix listed CWE-89

TI-2025-19263 CVE-2025-26200 · GHSA-4v3m-mrm4-6g89

SQL injection in SLIMS v.9.6.1 allows a remote attacker to escalate privileges via the…

HIGH 67

SQL injection in SLIMS v.9.6.1 allows a remote attacker to escalate privileges via the month parameter in the visitor_report_day.php component.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00541 Published 2025-02-24 No fix listed CWE-89

TI-2022-21172 CVE-2022-43362 · GHSA-j242-884g-4fr3

Senayan Library Management System v9.4.2 was discovered to contain a SQL injection…

HIGH 67

Senayan Library Management System v9.4.2 was discovered to contain a SQL injection vulnerability via the collType parameter at loan_by_class.php.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00857 Published 2022-11-01 No fix listed CWE-89

TI-2023-21633 CVE-2023-40969 · GHSA-974j-5rxr-363r

Senayan Library Management Systems SLIMS 9 Bulian v9.6.1 is vulnerable to Server Side…

MEDIUM 60

Senayan Library Management Systems SLIMS 9 Bulian v9.6.1 is vulnerable to Server Side Request Forgery (SSRF) via admin/modules/bibliography/pop_p2p.php.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0039 Published 2023-09-01 No fix listed CWE-918

TI-2024-16671 CVE-2024-25288 · GHSA-mv62-4r83-58qq

SLIMS (Senayan Library Management Systems) 9 Bulian v9.6.1 is vulnerable to SQL Injection via pop-scope-vocabolary.php.

MEDIUM 56

SLIMS (Senayan Library Management Systems) 9 Bulian v9.6.1 is vulnerable to SQL Injection via pop-scope-vocabolary.php.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00549 Published 2024-02-21 No fix listed CWE-89

TI-2022-21171 CVE-2022-43361 · GHSA-x8qm-qf7v-pr7j

Senayan Library Management System v9.4.2 was discovered to contain a cross-site scripting…

MEDIUM 55

Senayan Library Management System v9.4.2 was discovered to contain a cross-site scripting (XSS) vulnerability via the component pop_chart.php.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00477 Published 2022-11-01 No fix listed CWE-79

TI-2023-03497 CVE-2023-3744 · GHSA-hjvr-v7mw-6f2j

Server-Side Request Forgery in SLiMS

MEDIUM 44

Server-Side Request Forgery vulnerability in SLims version 9.6.0.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00555 Published 2023-10-02 No fix listed CWE-918

TI-2022-17952 CVE-2022-38292 · GHSA-5658-g88g-9pmw

SLiMS Senayan Library Management System v9.4.2 was discovered to contain multiple…

MEDIUM 44

SLiMS Senayan Library Management System v9.4.2 was discovered to contain multiple Server-Side Request Forgeries via the components /bibliography/marcsru.php and /bibliography/z3950sru.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00949 Published 2022-09-12 No fix listed CWE-918

TI-2021-20844 CVE-2021-45793 · GHSA-q7xv-4h2v-5hqp

Slims9 Bulian 9.4.2 is affected by SQL injection in lib/comment.inc.php.

MEDIUM 40

Slims9 Bulian 9.4.2 is affected by SQL injection in lib/comment.inc.php.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.04519 Published 2022-03-17 No fix listed CWE-89

TI-2021-20842 CVE-2021-45791 · GHSA-78fh-m7pg-3hwc

Slims8 Akasia 8.3.1 is affected by SQL injection in…

MEDIUM 40

Slims8 Akasia 8.3.1 is affected by SQL injection in /admin/modules/bibliography/index.php, /admin/modules/membership/member_type.php, /admin/modules/system/user_group.php, and /admin/modules/membership/index.php through…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00969 Published 2022-03-17 No fix listed CWE-89

TI-2017-09311 CVE-2017-12584 · GHSA-jqh4-579p-g57f

There is no CSRF mitigation in SLiMS 8 Akasia through 8.3.1.

MEDIUM 40

There is no CSRF mitigation in SLiMS 8 Akasia through 8.3.1.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0093 Published 2017-08-06 No fix listed CWE-352

TI-2021-20845 CVE-2021-45794 · GHSA-3wpc-prrg-9r55

Slims9 Bulian 9.4.2 is affected by SQL injection in /admin/modules/system/backup.php.

LOW 35

Slims9 Bulian 9.4.2 is affected by SQL injection in /admin/modules/system/backup.php.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01059 Published 2022-03-17 No fix listed CWE-89

TI-2022-17951 CVE-2022-38291 · GHSA-3fr6-q9r2-pc9g

SLiMS Senayan Library Management System v9.4.2 was discovered to contain a cross-site…

LOW 28

SLiMS Senayan Library Management System v9.4.2 was discovered to contain a cross-site scripting (XSS) vulnerability via the Search function.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00513 Published 2022-09-12 No fix listed CWE-79

TI-2021-20843 CVE-2021-45792 · GHSA-vvj7-7c7v-vf3p

Slims9 Bulian 9.4.2 is affected by Cross Site Scripting (XSS) in /admin/modules/system/custom_field.php.

LOW 23

Slims9 Bulian 9.4.2 is affected by Cross Site Scripting (XSS) in /admin/modules/system/custom_field.php.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00494 Published 2022-03-17 No fix listed CWE-79

Open these records in search →