Skip to content
Noroxi

SLIMS records

27 published records for vendor slims.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
2
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 22
  3. 23
  4. 24
  5. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

27 records
  • CVE-2022-38292
    39Monitor

    SLiMS Senayan Library Management System v9.4.2 was discovered to contain multiple Server-Side Request Forgeries via the components /bibliogr

    CriticalCVSS 9.8No exploitEPSS 0%

    slims · senayan library management systemSep 12, 2022

  • CVE-2017-12585
    36Monitor

    SLiMS 8 Akasia through 8.3.1 has SQL injection in admin/AJAX_lookup_handler.php (tableName and tableFields parameters), admin/AJAX_check_id.

    HighCVSS 8.8No exploitEPSS 1%

    slims · akasiaAug 5, 2017

  • CVE-2023-45996
    35Monitor

    SQL injection vulnerability in Senayan Library Management Systems Slims v.9 and Bulian v.9.6.1 allows a remote attacker to obtain sensitive

    HighCVSS 8.8No exploitEPSS 1%

    slims · senayan library management systemOct 31, 2023

  • CVE-2021-45791
    35Monitor

    Slims8 Akasia 8.3.1 is affected by SQL injection in /admin/modules/bibliography/index.php, /admin/modules/membership/member_type.php, /admin

    HighCVSS 8.8No exploitEPSS 0%

    slims · senayan library management systemMar 17, 2022

  • CVE-2017-12584
    35Monitor

    There is no CSRF mitigation in SLiMS 8 Akasia through 8.3.1.

    HighCVSS 8.8No exploitEPSS 0%

    slims · senayan library management systemAug 5, 2017

  • CVE-2023-48813
    35Monitor

    Senayan Library Management Systems (Slims) 9 Bulian v9.6.1 is vulnerable to SQL Injection via admin/modules/reporting/customs/fines_report.p

    HighCVSS 8.8No exploitEPSS 0%

    slims · senayan library management system bulianDec 1, 2023

  • CVE-2023-48893
    35Monitor

    SLiMS (aka SENAYAN Library Management System) through 9.6.1 allows admin/modules/reporting/customs/staff_act.php SQL Injection via startDate

    HighCVSS 8.8No exploitEPSS 0%

    slims · senayan library management system bulianDec 1, 2023

  • CVE-2023-40970
    35Monitor

    Senayan Library Management Systems SLIMS 9 Bulian v 9.6.1 is vulnerable to SQL Injection via admin/modules/circulation/loan_rules.php.

    HighCVSS 8.8No exploitEPSS 0%

    slims · senayan library management systemSep 1, 2023

  • CVE-2023-3744
    35Monitor

    Server-Side Request Forgery in SLiMS

    HighCVSS 8.8No exploitEPSS 0%

    slims · senayan library management systemOct 2, 2023

  • CVE-2021-45793
    31Monitor

    Slims9 Bulian 9.4.2 is affected by SQL injection in lib/comment.inc.php.

    HighCVSS 7.5Proof of conceptEPSS 4%

    slims · senayan library management systemMar 17, 2022

  • CVE-2021-45794
    30Monitor

    Slims9 Bulian 9.4.2 is affected by SQL injection in /admin/modules/system/backup.php.

    HighCVSS 7.5No exploitEPSS 1%

    slims · senayan library management systemMar 17, 2022

  • CVE-2022-45019
    30Monitor

    SLiMS 9 Bulian v9.5.0 was discovered to contain a SQL injection vulnerability via the keywords parameter.

    HighCVSS 7.5No exploitEPSS 0%

    slims · senayan library management systemDec 5, 2022

  • CVE-2023-29850
    30Monitor

    SENAYAN Library Management System (SLiMS) Bulian v9.5.2 does not strip exif data from uploaded images.

    HighCVSS 7.5No exploitEPSS 0%

    slims · senayan library management systemApr 14, 2023

  • CVE-2022-43362
    28Monitor

    Senayan Library Management System v9.4.2 was discovered to contain a SQL injection vulnerability via the collType parameter at loan_by_class

    HighCVSS 7.2No exploitEPSS 0%

    slims · senayan library management systemNov 1, 2022

  • CVE-2025-26200
    28Monitor

    SQL injection in SLIMS v.9.6.1 allows a remote attacker to escalate privileges via the month parameter in the visitor_report_day.php compone

    HighCVSS 7.2No exploitEPSS 0%

    slims · senayan library management systemFeb 24, 2025

  • CVE-2017-12586
    27Monitor

    SLiMS 8 Akasia through 8.3.1 has an arbitrary file reading issue because of directory traversal in the url parameter to admin/help.php.

    MediumCVSS 6.5No exploitEPSS 2%

    slims · akasiaAug 5, 2017

  • CVE-2025-22980
    26Monitor

    A SQL Injection vulnerability exists in Senayan Library Management System SLiMS 9 Bulian 9.6.1 via the tempLoanID parameter in the loan form

    MediumCVSS 6.7No exploitEPSS 0%

    slims · senayan library management system bulianJan 22, 2025

  • CVE-2025-45820
    26Monitor

    Slims (Senayan Library Management Systems) 9 Bulian 9.6.1 is vulnerable to SQL Injection in admin/modules/bibliography/pop_author_edit.php.

    MediumCVSS 6.5No exploitEPSS 0%

    slims · senayan library management system bulianMay 8, 2025

  • CVE-2025-45818
    26Monitor

    Slims (Senayan Library Management Systems) 9 Bulian 9.6.1 is vulnerable to SQL Injection in admin/modules/master_file/item_status.php.

    MediumCVSS 6.5No exploitEPSS 0%

    slims · senayan library management system bulianMay 8, 2025

  • CVE-2025-45819
    26Monitor

    Slims (Senayan Library Management Systems) 9 Bulian 9.6.1 is vulnerable to SQL Injection in admin/modules/master_file/author.php.

    MediumCVSS 6.5No exploitEPSS 0%

    slims · senayan library management system bulianMay 8, 2025

  • CVE-2017-7242
    24Monitor

    Multiple Cross-Site Scripting (XSS) were discovered in admin/modules components in SLiMS 7 Cendana through 2017-03-23: the keywords paramete

    MediumCVSS 6.1No exploitEPSS 0%

    slims · slims7 cendanaMar 23, 2017

  • CVE-2017-7202
    24Monitor

    Multiple Cross-Site Scripting (XSS) were discovered in SLiMS 7 Cendana before 2017-03-16.

    MediumCVSS 6.1No exploitEPSS 0%

    slims · slims7 cendanaMar 21, 2017

  • CVE-2022-38291
    24Monitor

    SLiMS Senayan Library Management System v9.4.2 was discovered to contain a cross-site scripting (XSS) vulnerability via the Search function.

    MediumCVSS 6.1No exploitEPSS 0%

    slims · senayan library management systemSep 12, 2022

  • CVE-2023-40969
    24Monitor

    Senayan Library Management Systems SLIMS 9 Bulian v9.6.1 is vulnerable to Server Side Request Forgery (SSRF) via admin/modules/bibliography/

    MediumCVSS 6.1No exploitEPSS 0%

    slims · senayan library management systemSep 1, 2023

  • CVE-2024-25288
    19Monitor

    SLIMS (Senayan Library Management Systems) 9 Bulian v9.6.1 is vulnerable to SQL Injection via pop-scope-vocabolary.php.

    MediumCVSS 4.9No exploitEPSS 0%

    slims · senayan library management systemFeb 21, 2024