CVE-2026-107081
Deferred Deferred - Pending Action

SQL Injection in SENAYAN Library Management System Bulian

Publication date: 2026-10-19

Last updated on: 2026-10-22

Assigner: MITRE

Description
SQL injection via identifier injection in the tableName and tableFields POST parameters of admin AJAX endpoints (admin/AJAX_lookup_handler.php, admin/AJAX_check_id.php, admin/AJAX_vocabolary_control.php) in SENAYAN Library Management System (SLiMS) Bulian 9.8.0 allows any authenticated staff user to extract arbitrary database contents.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-19
Last Modified
2026-10-22
Generated
2026-11-08
AI Q&A
2026-10-19
EPSS Evaluated
2026-11-07
NVD
CVE-2026-107081
EUVD
EUVD-2026-104452

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
n/a n/a n/a

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-89 The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-107081 is a SQL injection vulnerability in SLiMS 9.8.0 affecting admin AJAX endpoints. It occurs because user-controlled POST parameters tableName and tableFields are directly interpolated into SQL identifiers without validation or sanitization. Authenticated staff users can exploit this to extract arbitrary database contents, including admin password hashes.

Detection Guidance

To detect this SQL injection vulnerability in SLiMS 9.8.0, check if authenticated staff users can access admin AJAX endpoints (admin/AJAX_lookup_handler.php, admin/AJAX_check_id.php, admin/AJAX_vocabolary_control.php) and manipulate tableName or tableFields POST parameters. Test by sending crafted requests with SQL payloads like ' OR 1=1 -- to observe database errors or data leaks.

Impact Analysis

If you are an authenticated staff user of SLiMS 9.8.0, an attacker with your credentials could exploit this to steal sensitive data like admin password hashes, database versions, or other confidential information. Even low-privilege staff roles can perform these attacks.

Compliance Impact

This vulnerability could lead to unauthorized access to personal data, violating GDPR and HIPAA requirements for data protection and access controls. Organizations using SLiMS 9.8.0 may face compliance breaches, legal penalties, and reputational damage due to potential data leaks.

Mitigation Strategies

Immediately update SLiMS to a patched version if available. As a temporary fix, implement strict whitelisting for tableName and tableFields parameters, disable global admin sanitizer that disables SQL escaping, and ensure proper backtick quoting for identifiers. Disable admin AJAX endpoints if not essential.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-107081. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...