CVE-2026-107083: SQL Injection
Published Oct 19, 2026
·Updated
SENAYAN Library Management System (SLiMS) Bulian (slims9bulian) 9.8.0 is vulnerable to SQL Injection in admin/modules/reporting/customs/dldetail.php via the parameter fileID.
Affected Software
1 affected component
SENAYAN SLiMS Bulian=9.8.0
Event History
Oct 19, 2026
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·05:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What access does an attacker need to exploit this issue?
The CVSS vector indicates the issue is exploitable remotely over the network with low attack complexity, without privileges or user interaction.
2
What is the potential impact if exploitation succeeds?
The CVSS vector assigns high impact to confidentiality, integrity, and availability, indicating that successful exploitation could expose, alter, or disrupt affected system data and services.
3
Which component should be prioritized for investigation?
Prioritize the reporting module endpoint at admin/modules/reporting/customs/dl_detail.php and review handling of the fileID parameter for SQL injection exposure.