Lucene search

K
nvd[email protected]NVD:CVE-2014-100031
HistoryJan 13, 2015 - 3:59 p.m.

CVE-2014-100031

2015-01-1315:59:32
CWE-89
web.nvd.nist.gov
4

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.5

Confidence

Low

EPSS

0.002

Percentile

61.2%

Multiple SQL injection vulnerabilities in Ganesha Digital Library (GDL) 4.2 allow remote attackers to execute arbitrary SQL commands via the id parameter in (1) download.php or (2) main.php.

Affected configurations

Nvd
Node
ismail_fahmiganesha_digital_libraryMatch4.2
VendorProductVersionCPE
ismail_fahmiganesha_digital_library4.2cpe:2.3:a:ismail_fahmi:ganesha_digital_library:4.2:*:*:*:*:*:*:*

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.5

Confidence

Low

EPSS

0.002

Percentile

61.2%

Related for NVD:CVE-2014-100031