Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2025-65233

Reflected cross-site scripting (XSS) in SLiMS (slims9_bulian) before 9.6.0 via improper handling of $_SERVER['PHP_SELF' ] in index.php/sysconfig.inc.php, which allows remote attackers to execute arbitrary JavaScript in a victim's browser by supplying a crafted URL path.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Slims Slims Project
Products
Slims 9 Bulian Slims
CVE-2023-24086

SLIMS v9.5.2 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the component /customs/loan_by_class.php?reportView.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Slims Project
Products
Slims
CVE-2018-12658

Reflected Cross-Site Scripting (XSS) exists in the Stock Take module in SLiMS 8 Akasia 8.3.1 via an admin/modules/stock_take/index.php?keywords= URI.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Slims Project
Products
Slims