EUVD-2009-0962

Malware in sbrugna...

EUVD-2014-1062

Malware in sbrugna...

EUVD-2014-1060

Malware in sbrugna...

EUVD-2014-1061

Malware in sbrugna...

CVE-2014-100031

Multiple SQL injection vulnerabilities in Ganesha Digital Library GDL 4.2 allow remote attackers to execute arbitrary SQL commands via the id parameter in 1 download.php or 2 main.php...

CVE-2014-100030

Cross-site scripting XSS vulnerability in module/search/function.php in Ganesha Digital Library GDL 4.2 allows remote attackers to inject arbitrary web script or HTML via the keyword parameter in a ByEge action...

CVE-2014-100029

Multiple directory traversal vulnerabilities in class/session.php in Ganesha Digital Library GDL 4.2 allow remote attackers to read arbitrary files via a .. dot dot in the 1 newlang or 2 newtheme parameter...

Directory traversal

Multiple directory traversal vulnerabilities in class/session.php in Ganesha Digital Library GDL 4.2 allow remote attackers to read arbitrary files via a .. dot dot in the 1 newlang or 2 newtheme parameter...

Sql injection

Multiple SQL injection vulnerabilities in Ganesha Digital Library GDL 4.2 allow remote attackers to execute arbitrary SQL commands via the id parameter in 1 download.php or 2 main.php...

CVE-2014-100031

Ganesha Digital Library (GDL) version 4.2 is affected by multiple SQL injection vulnerabilities exploitable via the id parameter in download.php and main.php. The issue permits remote attackers to execute arbitrary SQL commands, with impacts stated as partial confidentiality, integrity, and avail...

CVE-2014-100029

CVE-2014-100029 affects Ganesha Digital Library (GDL) 4.2. Multiple directory traversal vulnerabilities in class/session.php allow remote attackers to read arbitrary files via .. in the newlang or newtheme parameters, enabling partial confidentiality impact. The NVD entry confirms the flaw but do...

CVE-2014-100029

Multiple directory traversal vulnerabilities in class/session.php in Ganesha Digital Library GDL 4.2 allow remote attackers to read arbitrary files via a .. dot dot in the 1 newlang or 2 newtheme parameter...

CVE-2014-100030

Cross-site scripting XSS vulnerability in module/search/function.php in Ganesha Digital Library GDL 4.2 allows remote attackers to inject arbitrary web script or HTML via the keyword parameter in a ByEge action...

CVE-2014-100031

Multiple SQL injection vulnerabilities in Ganesha Digital Library GDL 4.2 allow remote attackers to execute arbitrary SQL commands via the id parameter in 1 download.php or 2 main.php...

CVE-2014-100030

CVE-2014-100030 describes an XSS vulnerability in the Ganesha Digital Library (GDL) 4.2. The flaw is in the file module/search/function.php and allows remote attackers to inject arbitrary web script or HTML via the keyword parameter in a ByEge action. The available sources indicate the affected s...

Ganesha Digital Library 4.0 - Multiple Vulnerabilities

No description provided by source...

Ganesha Digital Library Multiple Vulnerabilities

Ganesha Digital Library is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ganesha Digital Library跨站脚本漏洞

Ganesha Digital Library是一款数字图书馆程序。 由于通过"keyword" GET参数传递到gdl.php的输入当"mod"设置为"search"，"action"设置为任意值在返回用户前未能正确过滤，攻击者可以利用漏洞在受影响站点上下文的用户浏览器会话中执行任意HTML和脚本代码。 0 Ganesha Digital Library 4.2 目前厂商暂无提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://kmrg.itb.ac.id/...

Ganesha Digital Library SQL注入漏洞

Ganesha Digital Library是一款数字图书馆程序。 由于通过"id" GET参数传递到gdl.php 当"mod"设置为"browse"，"op"设置为"comment"和传递到download.php的输入在被用于SQL查询前未能正确过滤，攻击者可以利用漏洞通过注入任意SQL代码操纵SQL查询。 0 Ganesha Digital Library 4.2 目前厂商暂无提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://kmrg.itb.ac.id/ SQL Injection vulnerability...

Ganesha Digital Library 4.0 Multiple Vulnerabilities

===================================================== Ganesha Digital Library 4.0 Multiple Vulnerabilities ===================================================== :---------------------------------------------------------------------------------------------------------------------------------------...