PT-2026-2362 · Slims · Senayan Library Management System

Nu11Secur1Ty · Published 2026-01-13 · Updated 2026-01-13 · CVE-2022-50805

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions Senayan Library Management System version 9.0.0

Description An issue exists where the class parameter allows the injection of malicious SQL queries. This can be exploited by submitting crafted payloads to manipulate database queries and potentially extract sensitive information. SQL injection is a type of flaw that occurs when an attacker can interfere with the queries that an application makes to its database.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2022-50805

Affected Products

Senayan Library Management System

References · 5

• 🔥 https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/slims.web.id/SLIMS-9.0.0/SQLi · Exploit
• 🔥 https://exploit-db.com/exploits/51161 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-50805 · Security Note
• https://vulncheck.com/advisories/senayan-library-management-system-sql-injection · Note
• https://slims.web.id/web · Note