İçeriğe atla
Noroxi

SLIMS kayıtları

slims üreticisine ait 27 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
2
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17
  2. 22
  3. 23
  4. 24
  5. 25

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

27 kayıt
  • CVE-2022-38292
    39İzleyin

    SLiMS Senayan Library Management System v9.4.2 was discovered to contain multiple Server-Side Request Forgeries via the components /bibliogr

    KritikCVSS 9,8İstismar yokEPSS %1

    slims · senayan library management system12 Eyl 2022

  • CVE-2017-12585
    36İzleyin

    SLiMS 8 Akasia through 8.3.1 has SQL injection in admin/AJAX_lookup_handler.php (tableName and tableFields parameters), admin/AJAX_check_id.

    YüksekCVSS 8,8İstismar yokEPSS %2

    slims · akasia5 Ağu 2017

  • CVE-2023-45996
    35İzleyin

    SQL injection vulnerability in Senayan Library Management Systems Slims v.9 and Bulian v.9.6.1 allows a remote attacker to obtain sensitive

    YüksekCVSS 8,8İstismar yokEPSS %1

    slims · senayan library management system31 Eki 2023

  • CVE-2021-45791
    35İzleyin

    Slims8 Akasia 8.3.1 is affected by SQL injection in /admin/modules/bibliography/index.php, /admin/modules/membership/member_type.php, /admin

    YüksekCVSS 8,8İstismar yokEPSS %1

    slims · senayan library management system17 Mar 2022

  • CVE-2017-12584
    35İzleyin

    There is no CSRF mitigation in SLiMS 8 Akasia through 8.3.1.

    YüksekCVSS 8,8İstismar yokEPSS %1

    slims · senayan library management system5 Ağu 2017

  • CVE-2023-48813
    35İzleyin

    Senayan Library Management Systems (Slims) 9 Bulian v9.6.1 is vulnerable to SQL Injection via admin/modules/reporting/customs/fines_report.p

    YüksekCVSS 8,8İstismar yokEPSS %1

    slims · senayan library management system bulian1 Ara 2023

  • CVE-2023-48893
    35İzleyin

    SLiMS (aka SENAYAN Library Management System) through 9.6.1 allows admin/modules/reporting/customs/staff_act.php SQL Injection via startDate

    YüksekCVSS 8,8İstismar yokEPSS %1

    slims · senayan library management system bulian1 Ara 2023

  • CVE-2023-40970
    35İzleyin

    Senayan Library Management Systems SLIMS 9 Bulian v 9.6.1 is vulnerable to SQL Injection via admin/modules/circulation/loan_rules.php.

    YüksekCVSS 8,8İstismar yokEPSS %1

    slims · senayan library management system1 Eyl 2023

  • CVE-2023-3744
    35İzleyin

    Server-Side Request Forgery in SLiMS

    YüksekCVSS 8,8İstismar yokEPSS %0

    slims · senayan library management system2 Eki 2023

  • CVE-2021-45793
    31İzleyin

    Slims9 Bulian 9.4.2 is affected by SQL injection in lib/comment.inc.php.

    YüksekCVSS 7,5Kavram kanıtıEPSS %5

    slims · senayan library management system17 Mar 2022

  • CVE-2021-45794
    30İzleyin

    Slims9 Bulian 9.4.2 is affected by SQL injection in /admin/modules/system/backup.php.

    YüksekCVSS 7,5İstismar yokEPSS %1

    slims · senayan library management system17 Mar 2022

  • CVE-2022-45019
    30İzleyin

    SLiMS 9 Bulian v9.5.0 was discovered to contain a SQL injection vulnerability via the keywords parameter.

    YüksekCVSS 7,5İstismar yokEPSS %1

    slims · senayan library management system5 Ara 2022

  • CVE-2023-29850
    30İzleyin

    SENAYAN Library Management System (SLiMS) Bulian v9.5.2 does not strip exif data from uploaded images.

    YüksekCVSS 7,5İstismar yokEPSS %1

    slims · senayan library management system14 Nis 2023

  • CVE-2022-43362
    28İzleyin

    Senayan Library Management System v9.4.2 was discovered to contain a SQL injection vulnerability via the collType parameter at loan_by_class

    YüksekCVSS 7,2İstismar yokEPSS %1

    slims · senayan library management system1 Kas 2022

  • CVE-2025-26200
    28İzleyin

    SQL injection in SLIMS v.9.6.1 allows a remote attacker to escalate privileges via the month parameter in the visitor_report_day.php compone

    YüksekCVSS 7,2İstismar yokEPSS %1

    slims · senayan library management system24 Şub 2025

  • CVE-2017-12586
    27İzleyin

    SLiMS 8 Akasia through 8.3.1 has an arbitrary file reading issue because of directory traversal in the url parameter to admin/help.php.

    OrtaCVSS 6,5İstismar yokEPSS %3

    slims · akasia5 Ağu 2017

  • CVE-2025-22980
    26İzleyin

    A SQL Injection vulnerability exists in Senayan Library Management System SLiMS 9 Bulian 9.6.1 via the tempLoanID parameter in the loan form

    OrtaCVSS 6,7İstismar yokEPSS %1

    slims · senayan library management system bulian22 Oca 2025

  • CVE-2025-45820
    26İzleyin

    Slims (Senayan Library Management Systems) 9 Bulian 9.6.1 is vulnerable to SQL Injection in admin/modules/bibliography/pop_author_edit.php.

    OrtaCVSS 6,5İstismar yokEPSS %0

    slims · senayan library management system bulian8 May 2025

  • CVE-2025-45818
    26İzleyin

    Slims (Senayan Library Management Systems) 9 Bulian 9.6.1 is vulnerable to SQL Injection in admin/modules/master_file/item_status.php.

    OrtaCVSS 6,5İstismar yokEPSS %0

    slims · senayan library management system bulian8 May 2025

  • CVE-2025-45819
    26İzleyin

    Slims (Senayan Library Management Systems) 9 Bulian 9.6.1 is vulnerable to SQL Injection in admin/modules/master_file/author.php.

    OrtaCVSS 6,5İstismar yokEPSS %0

    slims · senayan library management system bulian8 May 2025

  • CVE-2017-7242
    24İzleyin

    Multiple Cross-Site Scripting (XSS) were discovered in admin/modules components in SLiMS 7 Cendana through 2017-03-23: the keywords paramete

    OrtaCVSS 6,1İstismar yokEPSS %1

    slims · slims7 cendana23 Mar 2017

  • CVE-2017-7202
    24İzleyin

    Multiple Cross-Site Scripting (XSS) were discovered in SLiMS 7 Cendana before 2017-03-16.

    OrtaCVSS 6,1İstismar yokEPSS %1

    slims · slims7 cendana21 Mar 2017

  • CVE-2022-38291
    24İzleyin

    SLiMS Senayan Library Management System v9.4.2 was discovered to contain a cross-site scripting (XSS) vulnerability via the Search function.

    OrtaCVSS 6,1İstismar yokEPSS %1

    slims · senayan library management system12 Eyl 2022

  • CVE-2023-40969
    24İzleyin

    Senayan Library Management Systems SLIMS 9 Bulian v9.6.1 is vulnerable to Server Side Request Forgery (SSRF) via admin/modules/bibliography/

    OrtaCVSS 6,1İstismar yokEPSS %0

    slims · senayan library management system1 Eyl 2023

  • CVE-2024-25288
    19İzleyin

    SLIMS (Senayan Library Management Systems) 9 Bulian v9.6.1 is vulnerable to SQL Injection via pop-scope-vocabolary.php.

    OrtaCVSS 4,9İstismar yokEPSS %1

    slims · senayan library management system21 Şub 2024