CVE-2026-107082
8.8HighPublished 19 Oct 2026 · NVD status: Deferred · AI triage by gemini-3.8-flash
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
- Impact
- Full C/I/A compromise
- Weakness
- CWE-89
Impact
Authenticated staff members can extract sensitive database records via SQL injection. Attackers only need low-privilege staff access to reach the administrative bibliography module.
Root cause
The application applies string escaping to numeric input but concatenates it directly into an unquoted SQL query.
Affected systems
Senayan Library Management Systems (SLiMS) 9 Bulian version 9.8.0
CVSS v3.1 · CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Fix & remediation
Fixed version not specified; restrict or revoke administrative staff access to admin/modules/bibliography/index.php, or cast the 'opac_hide' and 'promoted' GET parameters to integers in PHP code before query execution.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
Slims (Senayan Library Management Systems) 9 Bulian 9.8.0 allows an authenticated staff user to perform SQL injection via the opac_hide and promoted GET parameters of admin/modules/bibliography/index.php, because escape_string() is applied but the values are concatenated into an unquoted numeric SQL context, leading to error-based information disclosure and arbitrary data extraction.