CVE-2014-100031: Ismail Fahmi Ganesha Digital Library

High severity, CVSS 7.5. EPSS: 2.3% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in Ganesha Digital Library (GDL) 4.2 allow remote attackers to execute arbitrary SQL commands via the id parameter in (1) download.php or (2) main.php.

Affected products

• Ismail Fahmi Ganesha Digital Library: version 4.2 only

Published 2015-01-13. Last modified 2026-06-17.