CVE-2022-50805
Senayan Library Management System 9.0.0 - SQL Injection
- State
- Published
- Severity
- 8.8 High
- Published
- Jan 13, 2026
- Updated
- Mar 5, 2026
- Reserved
- Dec 27, 2025
Description
Senayan Library Management System 9.0.0 contains a SQL injection vulnerability in the 'class' parameter that allows attackers to inject malicious SQL queries. Attackers can exploit the vulnerability by submitting crafted payloads to manipulate database queries and potentially extract sensitive information.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 8.8 High | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N | VulnCheck |
| 3.1 | 8.2 High | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N | VulnCheck |
Weaknesses
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Affected Products
| Product | Versions |
|---|---|
Senayan Library Management SystemSLIMS |
|
References
- ExploitDB-51161exploit
- Senayan Library Management System Official Websiteproduct
- Vulnerability Research Repositorytechnical-description
- VulnCheck Advisory: Senayan Library Management System 9.0.0 - SQL Injectionthird-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.