Ismail Fahmi » Ganesha Digital Library : Security Vulnerabilities, CVEs, CVSS score >= 3
Multiple SQL injection vulnerabilities in Ganesha Digital Library (GDL) 4.2 allow remote attackers to execute arbitrary SQL commands via the id parameter in (1) download.php or (2) main.php.
Max CVSS
7.5
EPSS Score
0.16%
Published
2015-01-13
Updated
2017-09-08
SQL injection vulnerability in functions/browse.php in Ganesha Digital Library (GDL) 4.0 and 4.2 allows remote attackers to execute arbitrary SQL commands via the node parameter in a browse action to gdl.php.
Max CVSS
7.5
EPSS Score
0.09%
Published
2009-03-19
Updated
2017-09-29
2 vulnerabilities found