SQL Injection in Ismail Fahmi Ganesha Digital Library
CVE-2014-100031
Multiple SQL injection vulnerabilities in Ganesha Digital Library (GDL) 4.2 allow remote attackers to execute arbitrary SQL commands via the id parameter in (1) download.php or (2) main.php.
Vulnerability class: SQL Injection
EPSS: 0.023 (81.9th percentile) — read the EPSS interpretation.
Affected products
- Ismail_fahmi Ganesha_digital_library — versions 4.2
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)
- cve@mitre.org (Exploit, x_refsource_MISC)