medium6.7
CVE-2025-22980
A SQL Injection vulnerability exists in Senayan Library Management System SLiMS 9 Bulian 9.6.1 via the tempLoanID parameter in the loan form on /admin/modules/…
Impact
A SQL Injection vulnerability exists in Senayan Library Management System SLiMS 9 Bulian 9.6.1 via the tempLoanID parameter in the loan form on /admin/modules/circulation/loan.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Slims | Senayan Library Management System Bulian | Version 9.6.1 |