CVE-2025-26200: Slims Senayan Library Management System

High severity, CVSS 7.2. EPSS: 0.5% chance of exploitation in the next 30 days.

SQL injection in SLIMS v.9.6.1 allows a remote attacker to escalate privileges via the month parameter in the visitor_report_day.php component.

Affected products

• Slims Senayan Library Management System: version 9.6.1 only

Published 2025-02-24. Last modified 2026-06-17.