CVE-2026-107084
High
Description
Slims (Senayan Library Management Systems) 9 Bulian 9.8.0 allows cross-site request forgery (CSRF) against admin/modules/circulation/loan_history_maintenance.php because the action=run GET parameter performs privileged, destructive operations with no CSRF token or POST confirmation, leading to data loss of loan history records.
SeverityHigh
CVSS8.8
Exploit probability—
Product—
PublishedOct 19, 2026
First seenOct 19, 2026
Weakness typeCWE-352Cross-site request forgery (CSRF)
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
Sources have not yet published the affected products and versions for this vulnerability.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.