{"id":"CVE-2023-45996","aliases":["EUVD-2023-50258","GHSA-r9c2-5gf9-7h96"],"status":"published","title":"SQL injection vulnerability in Senayan Library Management Systems Slims v.9 and Bulian v.9.6.1...","description":"SQL injection vulnerability in Senayan Library Management Systems Slims v.9 and Bulian v.9.6.1 allows a remote attacker to obtain sensitive information and execute arbitrary code via a crafted script to the reborrowLimit parameter in the member_type.php.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.01304,"percentile":0.70748,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-89"],"published":"2023-10-31T00:00:00Z","modified":"2026-10-28T02:30:58Z","products":[{"vendor":"slims","product":"senayan_library_management_system"},{"vendor":"slims","product":"senayan_library_management_system_bulian"}],"references":[{"url":"https://github.com/Vuln0wned/slims_owned/blob/main/slims/slims9-bulian-9.6.1-SQLI-member_type.md","tags":["x_transferred","Exploit","Third Party Advisory","web"]},{"url":"https://github.com/slims/slims9_bulian/issues/216","tags":["x_transferred","Exploit","Issue Tracking","Vendor Advisory","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-45996","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-r9c2-5gf9-7h96"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/45xxx/CVE-2023-45996.json","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2023-45996","description":"SQL injection vulnerability in Senayan Library Management Systems Slims v.9 and Bulian v.9.6.1 allows a remote attacker to obtain sensitive information and execute arbitrary code via a crafted script to the reborrowLimit parameter in the member_type.php.","status":"published","published":"2023-10-31T00:00:00Z","modified":"2024-09-05T19:11:48.226Z","updated_at":"2026-11-02T14:35:22.984825Z"}],"euvd":[{"id":"EUVD-2023-50258","description":"SQL injection vulnerability in Senayan Library Management Systems Slims v.9 and Bulian v.9.6.1 allows a remote attacker to obtain sensitive information and execute arbitrary code via a crafted script to the reborrowLimit parameter in the member_type.php.","status":"published","published":"2023-10-31T00:00:00Z","modified":"2024-09-05T19:11:48Z","updated_at":"2026-11-03T00:56:02.678796Z"}],"ghsa":[{"id":"GHSA-r9c2-5gf9-7h96","title":"SQL injection vulnerability in Senayan Library Management Systems Slims v.9 and Bulian v.9.6.1...","description":"SQL injection vulnerability in Senayan Library Management Systems Slims v.9 and Bulian v.9.6.1 allows a remote attacker to obtain sensitive information and execute arbitrary code via a crafted script to the reborrowLimit parameter in the member_type.php.","status":"published","published":"2023-10-31T06:30:23Z","modified":"2023-11-08T03:30:32Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:54:53.779138Z"}],"nvd":[{"id":"CVE-2023-45996","description":"SQL injection vulnerability in Senayan Library Management Systems Slims v.9 and Bulian v.9.6.1 allows a remote attacker to obtain sensitive information and execute arbitrary code via a crafted script to the reborrowLimit parameter in the member_type.php.","status":"published","published":"2023-10-31T06:15:07.883Z","modified":"2026-06-17T06:29:50.91Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:08:41.047232Z"}],"osv":[{"id":"CVE-2023-45996","description":"SQL injection vulnerability in Senayan Library Management Systems Slims v.9 and Bulian v.9.6.1 allows a remote attacker to obtain sensitive information and execute arbitrary code via a crafted script to the reborrowLimit parameter in the member_type.php.","status":"published","published":"2023-10-31T00:00:00Z","modified":"2026-10-28T02:30:58.275436963Z","updated_at":"2026-11-02T15:44:34.287121Z"}]}}