PT-2026-117452 · Undefined · Undefined
CVE-2026-107081
·
Published
2026-10-19
·
Updated
2026-10-19
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
SQL injection via identifier injection in the tableName and tableFields POST parameters of admin AJAX endpoints (admin/AJAX lookup handler.php, admin/AJAX check id.php, admin/AJAX vocabolary control.php) in SENAYAN Library Management System (SLiMS) Bulian 9.8.0 allows any authenticated staff user to extract arbitrary database contents.
Exploit
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Undefined