<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: slims</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2025-45820: Slims (Senayan Library Management Systems) 9 Bulian 9.6.1 is vulnerable to SQL Injection in admin/modules/bibl</title><link>https://patchthecve.com/cve/CVE-2025-45820.html</link><guid>https://patchthecve.com/cve/CVE-2025-45820.html</guid><pubDate>Wed, 17 Jun 2026 09:25:44 +0000</pubDate><description>MEDIUM 6.5: Slims (Senayan Library Management Systems) 9 Bulian 9.6.1 is vulnerable to SQL Injection in admin/modules/bibliography/pop_author_edit.php.</description></item><item><title>CVE-2025-45819: Slims (Senayan Library Management Systems) 9 Bulian 9.6.1 is vulnerable to SQL Injection in admin/modules/mast</title><link>https://patchthecve.com/cve/CVE-2025-45819.html</link><guid>https://patchthecve.com/cve/CVE-2025-45819.html</guid><pubDate>Wed, 17 Jun 2026 09:25:44 +0000</pubDate><description>MEDIUM 6.5: Slims (Senayan Library Management Systems) 9 Bulian 9.6.1 is vulnerable to SQL Injection in admin/modules/master_file/author.php.</description></item><item><title>CVE-2025-45818: Slims (Senayan Library Management Systems) 9 Bulian 9.6.1 is vulnerable to SQL Injection in admin/modules/mast</title><link>https://patchthecve.com/cve/CVE-2025-45818.html</link><guid>https://patchthecve.com/cve/CVE-2025-45818.html</guid><pubDate>Wed, 17 Jun 2026 09:25:44 +0000</pubDate><description>MEDIUM 6.5: Slims (Senayan Library Management Systems) 9 Bulian 9.6.1 is vulnerable to SQL Injection in admin/modules/master_file/item_status.php.</description></item><item><title>CVE-2025-26200: SQL injection in SLIMS v.9.6.1 allows a remote attacker to escalate privileges via the month parameter in the </title><link>https://patchthecve.com/cve/CVE-2025-26200.html</link><guid>https://patchthecve.com/cve/CVE-2025-26200.html</guid><pubDate>Wed, 17 Jun 2026 09:01:30 +0000</pubDate><description>HIGH 7.2: SQL injection in SLIMS v.9.6.1 allows a remote attacker to escalate privileges via the month parameter in the visitor_report_day.php component.</description></item><item><title>CVE-2025-22980: A SQL Injection vulnerability exists in Senayan Library Management System SLiMS 9 Bulian 9.6.1 via the tempLoa</title><link>https://patchthecve.com/cve/CVE-2025-22980.html</link><guid>https://patchthecve.com/cve/CVE-2025-22980.html</guid><pubDate>Wed, 17 Jun 2026 08:51:17 +0000</pubDate><description>MEDIUM 6.7: A SQL Injection vulnerability exists in Senayan Library Management System SLiMS 9 Bulian 9.6.1 via the tempLoanID parameter in the loan form on /admin/modules/circulation/loan.php.</description></item><item><title>CVE-2024-25288: SLIMS (Senayan Library Management Systems) 9 Bulian v9.6.1 is vulnerable to SQL Injection via pop-scope-vocabo</title><link>https://patchthecve.com/cve/CVE-2024-25288.html</link><guid>https://patchthecve.com/cve/CVE-2024-25288.html</guid><pubDate>Wed, 17 Jun 2026 07:15:48 +0000</pubDate><description>MEDIUM 4.9: SLIMS (Senayan Library Management Systems) 9 Bulian v9.6.1 is vulnerable to SQL Injection via pop-scope-vocabolary.php.</description></item></channel></rss>