CVE-2009-0965

CVE-2009-0965 concerns a SQL injection in Ganesha Digital Library (GDL) versions 4.0 and 4.2. The vulnerability affects functions/browse.php and can be triggered via the node parameter in a browse action to gdl.php, allowing remote attackers to execute arbitrary SQL commands. The NVD entry lists ...