CVE-2014-100031

Multiple SQL injection vulnerabilities in Ganesha Digital Library (GDL) 4.2 allow remote attackers to execute arbitrary SQL commands via the id parameter in (1) download.php or (2) main.php.

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

2.35% chance of exploitation in the next 30 days, 82th percentile

Published

2015-01-13

Updated

2024-08-06

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/31961

References

• CVE Record
• NVD entry

Related

• CVE-2014-100030
• CVE-2014-100039
• CVE-2014-100029
• CVE-2014-10008
• CVE-2014-100020
• CVE-2014-10009