SLIMS

Records28All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high14CVSS 7.0–8.9

Exploited now

SLIMS records in CISA KEV

No SLIMS vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Senayan Library Management System 17 records HIGH Senayan Library Management System Bulian 7 records HIGH Akasia 2 records MEDIUM Slims7 Cendana 2 records LOW

Records

7 records in Senayan Library Management System Bulian · all components

TI-2023-24679 CVE-2023-45996 · GHSA-r9c2-5gf9-7h96

SQL injection vulnerability in Senayan Library Management Systems Slims v.9 and Bulian…

HIGH 73

SQL injection vulnerability in Senayan Library Management Systems Slims v.9 and Bulian v.9.6.1 allows a remote attacker to obtain sensitive information and execute arbitrary code via a crafted script to the reborrowLimit…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01304 Published 2023-10-31 No fix listed CWE-89

TI-2025-28860 CVE-2025-45819 · GHSA-qhcg-w878-wwxf

Slims (Senayan Library Management Systems) 9 Bulian 9.6.1 is vulnerable to SQL Injection…

HIGH 70

Slims (Senayan Library Management Systems) 9 Bulian 9.6.1 is vulnerable to SQL Injection in admin/modules/master_file/author.php.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00324 Published 2025-05-08 No fix listed CWE-89

TI-2025-16811 CVE-2025-22980 · GHSA-6xjp-947h-mxr8

A SQL Injection vulnerability exists in Senayan Library Management System SLiMS 9 Bulian…

HIGH 65

A SQL Injection vulnerability exists in Senayan Library Management System SLiMS 9 Bulian 9.6.1 via the tempLoanID parameter in the loan form on /admin/modules/circulation/loan.php.

CVSS 3.1MEDIUM 6.7 Network High privileges No interaction EPSS 0.00645 Published 2025-01-22 No fix listed CWE-89

TI-2025-28861 CVE-2025-45820 · GHSA-27rh-f3qh-3mf4

Slims (Senayan Library Management Systems) 9 Bulian 9.6.1 is vulnerable to SQL Injection…

MEDIUM 64

Slims (Senayan Library Management Systems) 9 Bulian 9.6.1 is vulnerable to SQL Injection in admin/modules/bibliography/pop_author_edit.php.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00324 Published 2025-05-08 No fix listed CWE-89

TI-2025-28859 CVE-2025-45818 · GHSA-jm94-7488-jjfw

Slims (Senayan Library Management Systems) 9 Bulian 9.6.1 is vulnerable to SQL Injection…

MEDIUM 64

Slims (Senayan Library Management Systems) 9 Bulian 9.6.1 is vulnerable to SQL Injection in admin/modules/master_file/item_status.php.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00324 Published 2025-05-08 No fix listed CWE-89

TI-2023-26673 CVE-2023-48893 · GHSA-hw83-99pm-pwrr

SLiMS (aka SENAYAN Library Management System) through 9.6.1 allows…

LOW 39

SLiMS (aka SENAYAN Library Management System) through 9.6.1 allows admin/modules/reporting/customs/staff_act.php SQL Injection via startDate or untilDate.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00746 Published 2023-12-01 No fix listed CWE-89

TI-2023-26638 CVE-2023-48813 · GHSA-phhw-p62x-84wp

Senayan Library Management Systems (Slims) 9 Bulian v9.6.1 is vulnerable to SQL Injection…

LOW 39

Senayan Library Management Systems (Slims) 9 Bulian v9.6.1 is vulnerable to SQL Injection via admin/modules/reporting/customs/fines_report.php.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00746 Published 2023-12-01 No fix listed CWE-89

Open these records in search →