Slims (Senayan Library Management Systems) 9 Bulian 9.8.0 allows cross-site request forgery (CSRF) against admin/modules/circulation/loan_history_maintenance.php because the action=run GET parameter performs privileged, destructive operations with no CSRF token or POST confirmation, leading to data loss of loan history records.
History

Wed, 21 Oct 2026 17:15:00 +0000

Type Values Removed Values Added
First Time appeared Slims
Slims slims 9 Bulian
Vendors & Products Slims
Slims slims 9 Bulian

Mon, 19 Oct 2026 20:00:00 +0000

Type Values Removed Values Added
Title CSRF Against Admin Loan History Maintenance Leading to Data Loss
Weaknesses CWE-352

Mon, 19 Oct 2026 17:30:00 +0000

Type Values Removed Values Added
Description Slims (Senayan Library Management Systems) 9 Bulian 9.8.0 allows cross-site request forgery (CSRF) against admin/modules/circulation/loan_history_maintenance.php because the action=run GET parameter performs privileged, destructive operations with no CSRF token or POST confirmation, leading to data loss of loan history records.
References

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2026-10-19T00:00:00.000Z

Updated: 2026-10-19T17:17:15.786Z

Reserved: 2026-10-07T00:00:00.000Z

Link: CVE-2026-107084

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Deferred

Published: 2026-10-19T18:16:59.047

Modified: 2026-10-19T21:14:14.150

Link: CVE-2026-107084

cve-icon Redhat

No data.