CVE-2014-100029: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in class/session.php in Ganesha Digital Library GDL 4.2 allow remote attackers to read arbitrary files via a .. dot dot in the 1 newlang or 2 newtheme parameter...

PT-2015-3639

Name of the Vulnerable Software and Affected Versions Ganesha Digital Library GDL version 4.2 Description The issue allows remote attackers to execute arbitrary SQL commands. This is possible via the id parameter in the "download.php" or "main.php" API endpoints. Recommendations For Ganesha Digit...

PT-2015-3636

Name of the Vulnerable Software and Affected Versions Ganesha Digital Library GDL version 4.2 Description The issue concerns multiple directory traversal vulnerabilities. These vulnerabilities allow remote attackers to read arbitrary files by utilizing a .. dot dot in specific parameters. The...

PT-2015-3638

Name of the Vulnerable Software and Affected Versions Ganesha Digital Library GDL version 4.2 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the keyword parameter in a ByEge action. This occurs in the...