CVE-2025-61488: Code Injection
Published Oct 20, 2025
·Updated
An issue in Senayan Library Management System (SLiMS) 9 Bulian v.9.6.1 allows a remote attacker to execute arbitrary code via the scrapimage.php component and the imageURL parameter
Affected Software
1 affected component
Senayan Library Management System (SLiMS)
Event History
Oct 20, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·07:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-61488?
CVE-2025-61488 is a high-severity vulnerability that allows remote code execution in the Senayan Library Management System.
2
How do I fix CVE-2025-61488?
To fix CVE-2025-61488, update the Senayan Library Management System to the latest version that addresses this vulnerability.
3
What component is affected in CVE-2025-61488?
The scrap_image.php component is affected in CVE-2025-61488, specifically through the imageURL parameter.
4
Who is affected by CVE-2025-61488?
Users of the Senayan Library Management System (SLiMS) v.9.6.1 are affected by CVE-2025-61488.
5
What type of attack is enabled by CVE-2025-61488?
CVE-2025-61488 enables remote attackers to execute arbitrary code on the affected system.