Unscored CVE-2023-45996 EUVD-2023-50258GHSA-r9c2-5gf9-7h96

SQL injection vulnerability in Senayan Library Management Systems Slims v.9 and Bulian v.9.6.1 allows a remote attacker to obtain sensitive…

Published Oct 31, 2023 · Updated Sep 5, 2024 · Assigned by mitre

Description

SQL injection vulnerability in Senayan Library Management Systems Slims v.9 and Bulian v.9.6.1 allows a remote attacker to obtain sensitive information and execute arbitrary code via a crafted script to the reborrowLimit parameter in the member_type.php.

References

https://github.com/Vuln0wned/slims_owned/blob/main/slims/slims9-bulian-9.6.1-SQLI-member_type.md
https://github.com/slims/slims9_bulian/issues/216