A SQL Injection vulnerability exists in Senayan Library Management System SLiMS 9 Bulian 9.6.1 via the tempLoanID parameter in the loan form on /admin/modules/circulation/loan.php.
References
| Link | Resource |
|---|---|
| https://github.com/slims/slims9_bulian/issues/270 | Exploit Third Party Advisory Issue Tracking |
| https://mebroccoli.blogspot.com/2025/01/sql-injection-vulnerability-in-senayan.html | Exploit Third Party Advisory |
Configurations
History
18 Jun 2025, 16:01
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Slims
Slims senayan Library Management System Bulian |
|
| References | () https://github.com/slims/slims9_bulian/issues/270 - Exploit, Third Party Advisory, Issue Tracking | |
| References | () https://mebroccoli.blogspot.com/2025/01/sql-injection-vulnerability-in-senayan.html - Exploit, Third Party Advisory | |
| CPE | cpe:2.3:a:slims:senayan_library_management_system_bulian:9.6.1:*:*:*:*:*:*:* |
28 Jan 2025, 22:15
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.7 |
| CWE | CWE-89 |
27 Jan 2025, 18:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
|
| Summary |
|
22 Jan 2025, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-01-22 15:15
Updated : 2025-06-18 16:01
NVD link : CVE-2025-22980
Mitre link : CVE-2025-22980
CVE.ORG link : CVE-2025-22980
JSON object : View
Products Affected
slims
- senayan_library_management_system_bulian
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')