Unrated severityNVD Advisory· Published Oct 19, 2026

CVE-2026-107084

Description

Slims (Senayan Library Management Systems) 9 Bulian 9.8.0 allows cross-site request forgery (CSRF) against admin/modules/circulation/loan_history_maintenance.php because the action=run GET parameter performs privileged, destructive operations with no CSRF token or POST confirmation, leading to data loss of loan history records.

Affected products

Slims/Slims9 Bulianllm-fuzzy
Range: 9.8.0

Patches

Vulnerability mechanics

References

github.com/slims/slims9_bulian/issues/394nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000