Senayan Library Management Systems CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH Senayan Library Management Systems CVE published 2026-10-19

CVE-2026-107082

CVE-2026-107082 is a SQL injection vulnerability in Slims (Senayan Library Management Systems) 9 Bulian 9.8.0. An authenticated staff user can exploit this via the opac_hide and promoted GET parameters of admin/modules/bibliography/index.php. The vulnerability allows for error-based information disclosure and arbitrary data extraction due to improper use of escape_string() in an unquoted numeric SQL context.