CVE-2026-107081

SQL injection via identifier injection in the tableName and tableFields POST parameters of admin AJAX endpoints (admin/AJAX_lookup_handler.php, admin/AJAX_check_id.php, admin/AJAX_vocabolary_control.php) in SENAYAN Library Management System (SLiMS) Bulian 9.8.0 allows any authenticated staff user to extract arbitrary database contents.

CVSS v3.1 CNA

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.49% chance of exploitation in the next 30 days, 42nd percentile

Published

2026-10-19

Updated

2026-10-22

Proof-of-concept exploits (1)

• Primandito/CVE-2026-107081Repo stars 1★ · pushed 2026-10-30 · find archive

CVE references

• slims/slims9_bulian/issues/391REFERENCE

References

• CVE Record
• NVD entry

Related

• CVE-2026-107082
• CVE-2026-117182
• CVE-2026-117184