CVE-2025-25403

Slims (Senayan Library Management Systems) 9 Bulian V9.6.1 is vulnerable to SQL Injection in admin/modules/master_file/coll_type.php

Critical · published April 29, 2025

CVSS v3.1
9.8
EPSS
0%
Percentile
35.0
In the wild
Unconfirmed
What it is

🚨 An SQL injection vulnerability lurks in Slims 9.6.1, ready to let attackers dive deep into your database like a sneaky raccoon rummaging through a dumpster! 🔥 Think of the admin panel as a secure vault — but this SQL injection flaw is like a delivery driver using the wrong code to get into the vault without a second glance, bypassing all security measures. It's a recipe for chaos! An attacker could exploit this gaping hole to access, alter, or delete critical data stored in your library management system. This could lead to unauthorized exposure of sensitive information, potential data loss, and an absolute nightmare for your organization!

Put simply

Think of the admin panel as a secure vault — but this SQL injection flaw is like a delivery driver using the wrong code to get into the vault without a second glance, bypassing all security measures. It's a recipe for chaos! This SQL injection vulnerability in admin/modules/master_file/coll_type.php allows attackers to manipulate database queries by injecting malicious SQL code, bypassing standard security measures and gaining unauthorized access.

What to do

An attacker could exploit this gaping hole to access, alter, or delete critical data stored in your library management system. This could lead to unauthorized exposure of sensitive information, potential data loss, and an absolute nightmare for your organization! Immediately patch Slims to the latest version to close this critical vulnerability. Review and sanitize all database inputs, and consider using prepared statements to prevent future SQL injection risks. Conduct a thorough audit of your database for any potential breaches! You've got this! Follow these steps to secure your system and maintain your hero status as a guardian of data! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00418 · 35.0th percentile
Published
2025-04-29T00:00Z
EPSS history
Timeline
  • 29 APR 00:00Z
    Slims (Senayan Library Management Systems) 9 Bulian V9.6.1 is vulnerable to SQL Injection in admin/modules/master_file/coll_type.php
    cvelistv5