CVE-2026-107081
CVE-2026-107081
This page contains facts from public vulnerability sources. Check the original advisory before updating.
SQL injection via identifier injection in the tableName and tableFields POST parameters of admin AJAX endpoints (admin/AJAX_lookup_handler.php, admin/AJAX_check_id.php, admin/AJAX_vocabolary_control.php) in SENAYAN Library Management System (SLiMS) Bulian 9.8.0 allows any authenticated staff user to extract arbitrary database contents.
CVSS 9.8 · Critical · EPSS 0.5%
- Published
- Updated
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published