CVEvulnerability
CVE-2023-48893
8.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2023-12-01
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-89
Description
SLiMS (aka SENAYAN Library Management System) through 9.6.1 allows admin/modules/reporting/customs/staff_act.php SQL Injection via startDate or untilDate.
Affected configurations
• slims senayan library management system bulian 9.6.1
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- https://github.com/Vuln0wned/slims_owned/blob/main/slims/slims9-bulian-9.6.1-SQLI-staff_act.md Exploit
- https://github.com/slims/slims9_bulian/issues/209 Exploit, Issue Tracking
- https://github.com/Vuln0wned/slims_owned/blob/main/slims/slims9-bulian-9.6.1-SQLI-staff_act.md Exploit
- https://github.com/slims/slims9_bulian/issues/209 Exploit, Issue Tracking