Vulnerabilities

TI-2014-08294 CVE-2014-100030 · GHSA-rv6h-gcx5-h6mx

Cross-site scripting (XSS) vulnerability in module/search/function.php in Ganesha Digital…

LOW 26

Cross-site scripting (XSS) vulnerability in module/search/function.php in Ganesha Digital Library (GDL) 4.2 allows remote attackers to inject arbitrary web script or HTML via the keyword parameter in a ByEge action.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03247 Published 2015-01-13 No fix listed CWE-79

TI-2014-08293 CVE-2014-100029 · GHSA-xm42-v588-gp5m

Multiple directory traversal vulnerabilities in class/session.php in Ganesha Digital…

LOW 33

Multiple directory traversal vulnerabilities in class/session.php in Ganesha Digital Library (GDL) 4.2 allow remote attackers to read arbitrary files via a ..

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.07043 Published 2015-01-13 No fix listed CWE-22

Vulnerabilities

Filters

Cross-site scripting (XSS) vulnerability in module/search/function.php in Ganesha Digital…

Multiple directory traversal vulnerabilities in class/session.php in Ganesha Digital…