12 matches found
GDL 4.2 gdl.php keyword Cross site scripting xss vulnerability
No description provided by source...
GDL 4.2 download.php&main.php SQL Injection vulnerability
No description provided by source...
Cross site scripting
Cross-site scripting XSS vulnerability in module/search/function.php in Ganesha Digital Library GDL 4.2 allows remote attackers to inject arbitrary web script or HTML via the keyword parameter in a ByEge action...
CVE-2014-100031
Ganesha Digital Library (GDL) version 4.2 is affected by multiple SQL injection vulnerabilities exploitable via the id parameter in download.php and main.php. The issue permits remote attackers to execute arbitrary SQL commands, with impacts stated as partial confidentiality, integrity, and avail...
CVE-2014-100030
Cross-site scripting XSS vulnerability in module/search/function.php in Ganesha Digital Library GDL 4.2 allows remote attackers to inject arbitrary web script or HTML via the keyword parameter in a ByEge action...
CVE-2014-100030
CVE-2014-100030 describes an XSS vulnerability in the Ganesha Digital Library (GDL) 4.2. The flaw is in the file module/search/function.php and allows remote attackers to inject arbitrary web script or HTML via the keyword parameter in a ByEge action. The available sources indicate the affected s...
CVE-2014-100029
CVE-2014-100029 affects Ganesha Digital Library (GDL) 4.2. Multiple directory traversal vulnerabilities in class/session.php allow remote attackers to read arbitrary files via .. in the newlang or newtheme parameters, enabling partial confidentiality impact. The NVD entry confirms the flaw but do...
GDL 4.2 - Directory traversal vulnerability
No description provided by source...
GDL 4.2 - Multiple Vulnerabilities
GDL version 4.2 suffers from cross site scripting, remote SQL injection, and directory traversal vulnerabilities. - Title : GDL 4.2 Multiple Vulnerabilities - Down. Script : http://kmrg.itb.ac.id/ - http://kmrg.itb.ac.id/gdl42.zip - Author : ByEge - Home : http://byege.blogspot.com.tr/ - Tested :...
GDL 4.2 - Multiple Vulnerabilities
GDL 4.2 - Multiple Vulnerabilities - Title : GDL 4.2 Multiple Vulnerabilities - Down. Script : http://kmrg.itb.ac.id/ - http://kmrg.itb.ac.id/gdl42.zip - Author : ByEge - Home : http://byege.blogspot.com.tr/ - Tested : Apache/2.2.22 Win32 PHP/5.4.3 - Date : 26/02/2014 - Google Dork : "Powered by...
GDL 4.2 - Multiple Vulnerabilities
Title : GDL 4.2 Multiple Vulnerabilities - Down. Script : http://kmrg.itb.ac.id/ - http://kmrg.itb.ac.id/gdl42.zip - Author : ByEge - Home : http://byege.blogspot.com.tr/ - Tested : Apache/2.2.22 Win32 PHP/5.4.3 - Date : 26/02/2014 - Google Dork : "Powered by GDL 4.2" And "gdl.php?mod=browse" -...
CVE-2009-0965
CVE-2009-0965 concerns a SQL injection in Ganesha Digital Library (GDL) versions 4.0 and 4.2. The vulnerability affects functions/browse.php and can be triggered via the node parameter in a browse action to gdl.php, allowing remote attackers to execute arbitrary SQL commands. The NVD entry lists ...