UNKNOWNCVSS not yet scoredVulnerability
CVE-2026-107081
SQL injection via identifier injection in the tableName and tableFields POST parameters of admin AJAX endpoints (admin/AJAX_lookup_handler.php, admin/AJAX_check_id.php, admin/AJAX_vocabolary_control.php) in SENAYAN Library Management System (SLiMS) Bulian 9.8.0 allows any authenticated staff user to extract arbitrary database contents.
Properties
- Last source
- FIRST EPSS
- Nvd fetched at
- 2026-10-20T21:14:08.448323+00:00
- Epss score
- 0.0033
- Cve id
- CVE-2026-107081
- First seen by Signal
- 2026-10-19T19:31:52+00:00
- Retrieved at
- 2026-10-21T01:24:48+00:00
- Published at
- 2026-10-19T16:17:01.347
- Last modified
- 2026-10-19T21:14:14.150
- Epss percentile
- 0.24652
Explore deeper with Ninja Signal's threat intelligence graph