CVE-2025-26200

HIGH CVSS: 7.2 Published: 2025-02-24 Modified: 2026-06-17

Description

SQL injection in SLIMS v.9.6.1 allows a remote attacker to escalate privileges via the month parameter in the visitor_report_day.php component.

Affected Platforms

Slims Senayan Library Management System

Weakness Type

CWE-89

References