CVE-2023-48813
CVSS 3.1 Score 8.8 of 10 (high)
Attack Complexity low
Confidentiality high
Integrity high
Availability high
Privileges Required low
Scope unchanged
Details
Published Dec 1, 2023
Updated: Dec 6, 2023
CWE ID 89
Summary
CVE-2023-48813: A vulnerability has been identified in Senayan Library Management Systems (Slims) version 9 Bulian v9.6.1. The issue lies in the reporting module, specifically in the fines_report.php file. An SQL injection vulnerability exists, allowing unauthorized users to inject malicious SQL code and potentially gain unauthorized access to sensitive data. This could lead to data theft, modification, or destruction. Users are advised to upgrade to a patched version or apply appropriate security measures to mitigate the risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- Slims