Threats tagged 'ghsa-2h92-7h5x-98h5'

Slims (Senayan Library Management Systems) version 9 Bulian 9.8.0 is vulnerable to a cross-site request forgery (CSRF) attack targeting the admin/modules/circulation/loan_history_maintenance.php endpoint. The vulnerability arises because the action=run GET parameter triggers privileged and destructive operations without requiring a CSRF token or POST confirmation. This flaw can lead to unauthorized deletion of loan history records, resulting in data loss.