SQL injection vulnerability in Senayan Library Management Systems Slims v.9 and Bulian v.9.6.1 allows a remote attacker to obtain sensitive information and execute arbitrary code via a crafted script to the reborrowLimit parameter in the member_type.php.
References
| Link | Resource |
|---|---|
| https://github.com/Vuln0wned/slims_owned/blob/main/slims/slims9-bulian-9.6.1-SQLI-member_type.md | Exploit Third Party Advisory |
| https://github.com/slims/slims9_bulian/issues/216 | Exploit Issue Tracking Vendor Advisory |
| https://github.com/Vuln0wned/slims_owned/blob/main/slims/slims9-bulian-9.6.1-SQLI-member_type.md | Exploit Third Party Advisory |
| https://github.com/slims/slims9_bulian/issues/216 | Exploit Issue Tracking Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 08:27
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/Vuln0wned/slims_owned/blob/main/slims/slims9-bulian-9.6.1-SQLI-member_type.md - Exploit, Third Party Advisory | |
| References | () https://github.com/slims/slims9_bulian/issues/216 - Exploit, Issue Tracking, Vendor Advisory |
08 Nov 2023, 03:02
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Slims senayan Library Management System Bulian
Slims senayan Library Management System Slims |
|
| References | (MISC) https://github.com/Vuln0wned/slims_owned/blob/main/slims/slims9-bulian-9.6.1-SQLI-member_type.md - Exploit, Third Party Advisory | |
| References | (MISC) https://github.com/slims/slims9_bulian/issues/216 - Exploit, Issue Tracking, Vendor Advisory | |
| CPE | cpe:2.3:a:slims:senayan_library_management_system_bulian:9.6.1:*:*:*:*:*:*:* cpe:2.3:a:slims:senayan_library_management_system:9.0:*:*:*:*:*:*:* |
|
| CWE | CWE-89 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.8 |
31 Oct 2023, 06:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-10-31 06:15
Updated : 2024-11-21 08:27
NVD link : CVE-2023-45996
Mitre link : CVE-2023-45996
CVE.ORG link : CVE-2023-45996
JSON object : View
Products Affected
slims
- senayan_library_management_system_bulian
- senayan_library_management_system
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')