PT-2026-117492 · Undefined · Undefined
CVE-2026-107082
·
Published
2026-10-19
·
Updated
2026-10-19
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Slims (Senayan Library Management Systems) 9 Bulian 9.8.0 allows an authenticated staff user to perform SQL injection via the opac hide and promoted GET parameters of admin/modules/bibliography/index.php, because escape string() is applied but the values are concatenated into an unquoted numeric SQL context, leading to error-based information disclosure and arbitrary data extraction.
Exploit
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Undefined