Vulnerabilities

TI-2014-08295 CVE-2014-100031 · GHSA-frpc-jxpr-q373

Multiple SQL injection vulnerabilities in Ganesha Digital Library (GDL) 4.2 allow remote…

LOW 37

Multiple SQL injection vulnerabilities in Ganesha Digital Library (GDL) 4.2 allow remote attackers to execute arbitrary SQL commands via the id parameter in (1) download.php or (2) main.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02348 Published 2015-01-13 No fix listed CWE-89

TI-2009-00919 CVE-2009-0965 · GHSA-54h3-5r8p-9v46

SQL injection vulnerability in functions/browse.php in Ganesha Digital Library (GDL) 4.0…

LOW 35

SQL injection vulnerability in functions/browse.php in Ganesha Digital Library (GDL) 4.0 and 4.2 allows remote attackers to execute arbitrary SQL commands via the node parameter in a browse action to gdl.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01018 Published 2009-03-19 No fix listed CWE-89

Vulnerabilities

Filters

Multiple SQL injection vulnerabilities in Ganesha Digital Library (GDL) 4.2 allow remote…

SQL injection vulnerability in functions/browse.php in Ganesha Digital Library (GDL) 4.0…