PT-2026-117517 · Undefined · Undefined
CVE-2026-107084
·
Published
2026-10-19
·
Updated
2026-10-19
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Slims (Senayan Library Management Systems) 9 Bulian 9.8.0 allows cross-site request forgery (CSRF) against admin/modules/circulation/loan history maintenance.php because the action=run GET parameter performs privileged, destructive operations with no CSRF token or POST confirmation, leading to data loss of loan history records.
Exploit
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Undefined