CVE-2014-100031 - Multiple SQL injection vulnerabilities in Ganesha Digital Library (GDL) 4.2 allow remote attackers to execute arbitrary SQL commands via the id parameter in (1) download.php or (2) main.php

Back Back to CVE browser

HIGH

Multiple SQL injection vulnerabilities in Ganesha Digital Library (GDL) 4.2 allow remote attackers to execute arbitrary SQL commands via the id parameter in (1) download.php or (2) main.php

Published Jan 13, 2015

7.5

HIGH

CVSS 2.0

EPSS 2.35%

Description

Multiple SQL injection vulnerabilities in Ganesha Digital Library (GDL) 4.2 allow remote attackers to execute arbitrary SQL commands via the id parameter in (1) download.php or (2) main.php.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

References (3)

http://packetstormsecurity.com/files/125464
x_refsource_MISCExploit
http://secunia.com/advisories/57171
third-party-advisoryx_refsource_SECUNIA
https://exchange.xforce.ibmcloud.com/vulnerabilities/91554
vdb-entryx_refsource_XF

Link	Providers	Tags
http://packetstormsecurity.com/files/125464		x_refsource_MISCExploit
http://secunia.com/advisories/57171		third-party-advisoryx_refsource_SECUNIA
https://exchange.xforce.ibmcloud.com/vulnerabilities/91554		vdb-entryx_refsource_XF

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Jan 13, 2015

Updated Aug 6, 2024

Reserved Jan 13, 2015

Link CVE-2014-100031

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2014-100031

Red Hat

Severity n/a

Public date n/a

Links CVE-2014-100031