https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-06T18:47:49.221305+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-107084 fkie_cve-2026-107084 2026-11-06T18:47:49.239846+00:00

Slims (Senayan Library Management Systems) 9 Bulian 9.8.0 allows cross-site request forgery (CSRF) against admin/modules/circulation/loan_history_maintenance.php because the action=run GET parameter performs privileged, destructive operations with no CSRF token or POST confirmation, leading to data loss of loan history records.

 https://db.gcve.eu/vuln/ghsa-2h92-7h5x-98h5 GHSA-2h92-7h5x-98h5 2026-11-06T18:47:49.239917+00:00

Slims (Senayan Library Management Systems) 9 Bulian 9.8.0 allows cross-site request forgery (CSRF) against admin/modules/circulation/loan_history_maintenance.php because the action=run GET parameter performs privileged, destructive operations with no CSRF token or POST confirmation, leading to data loss of loan history records.