CVE

Id
38400  
CVE No.
CVE-2009-0965  
Status
Candidate  
Description
SQL injection vulnerability in functions/browse.php in Ganesha Digital Library (GDL) 4.0 and 4.2 allows remote attackers to execute arbitrary SQL commands via the node parameter in a browse action to gdl.php.  
Phase
Assigned (20090318)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
419131 38400 CVE-2009-0965 MILW0RM:8228  View
419132 38400 CVE-2009-0965 URL:http://www.milw0rm.com/exploits/8228  View
419133 38400 CVE-2009-0965 BID:34144  View
419134 38400 CVE-2009-0965 URL:http://www.securityfocus.com/bid/34144  View
419135 38400 CVE-2009-0965 OSVDB:52803  View
419136 38400 CVE-2009-0965 URL:http://osvdb.org/52803  View
419137 38400 CVE-2009-0965 VUPEN:ADV-2009-0751  View
419138 38400 CVE-2009-0965 URL:http://www.vupen.com/english/advisories/2009/0751  View
419139 38400 CVE-2009-0965 XF:gdl-node-sql-injection(49292)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
44886 JVNDB-2009-005893 phpFoX の account/settings/account/index.php におけるクロスサイトリクエストフォージェリの脆弱性 phpFoX の account/settings/account/index.php には、クロスサイトリクエストフォージェリの脆弱性が存在します。 CVE-2009-0969 38400 6.8 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-005893.html  View