CVE-2026-107084
NONE—CVSS v3
—CVSS v2
0.20%
EPSS (exploit probability)
—CWE
Description
Slims (Senayan Library Management Systems) 9 Bulian 9.8.0 allows cross-site request forgery (CSRF) against admin/modules/circulation/loan_history_maintenance.php because the action=run GET parameter performs privileged, destructive operations with no CSRF token or POST confirmation, leading to data loss of loan history records.
Affected routers (0)
No routers currently mapped to this CVE in our database.