CVE-2014-100031

2015-01-1315:00:00

mitre

www.cve.org

AI Score

8.5

Confidence

Low

EPSS

0.002

Percentile

61.2%

JSON

Multiple SQL injection vulnerabilities in Ganesha Digital Library (GDL) 4.2 allow remote attackers to execute arbitrary SQL commands via the id parameter in (1) download.php or (2) main.php.

References

packetstormsecurity.com/files/125464

secunia.com/advisories/57171

exchange.xforce.ibmcloud.com/vulnerabilities/91554