high7.2
CVE-2025-26200
SQL injection in SLIMS v.9.6.1 allows a remote attacker to escalate privileges via the month parameter in the visitor_report_day.php component.
Impact
SQL injection in SLIMS v.9.6.1 allows a remote attacker to escalate privileges via the month parameter in the visitor_report_day.php component.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Slims | Senayan Library Management System | Version 9.6.1 |