CVE-2023-45996: SQL Injection

Published Oct 31, 2023

Updated

SQL injection vulnerability in Senayan Library Management Systems Slims v.9 and Bulian v.9.6.1 allows a remote attacker to obtain sensitive information and execute arbitrary code via a crafted script to the reborrowLimit parameter in the membertype.php.

Affected Software

2 affected components

Slims Senayan Library Management System=9.0

Slims Senayan Library Management System Bulian=9.6.1

Event History

Oct 31, 2023

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·06:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the vulnerability ID of this SQL injection vulnerability?

The vulnerability ID of this SQL injection vulnerability is CVE-2023-45996.

What is the severity level of CVE-2023-45996?

CVE-2023-45996 has a severity level of 8.8, which is considered high.

What software is affected by CVE-2023-45996?

Senayan Library Management Systems Slims v.9 and Bulian v.9.6.1 are affected by CVE-2023-45996.

How can an attacker exploit CVE-2023-45996?

An attacker can exploit CVE-2023-45996 by sending a crafted script to the reborrowLimit parameter in the member_type.php.

Where can I find more information about CVE-2023-45996?

You can find more information about CVE-2023-45996 in the references provided: [link1](https://github.com/Vuln0wned/slims_owned/blob/main/slims/slims9-bulian-9.6.1-SQLI-member_type.md) and [link2](https://github.com/slims/slims9_bulian/issues/216).