Ganesha Digital Library SQL注入漏洞

############################# #SQL Injection vulnerability# ############################# http://localhost/download.php?id=injecthere Line : gdl42/download.php 18 - 24 parameter : id $file_id = $_GET['id']; function download_redirect(){ global $file_id,$gdl_db,$gdl_metadata,$gdl_publisher,$gdl_session,$gdl_publisher2; $dbres = $gdl_db->select("relation","part,path,identifier,uri","relation_id=$file_id"); $file_target=@mysql_result($dbres,0,"path"); $file_part=@mysql_result($dbres,0,"part"); $publisher = $gdl_metadata->get_publisher(@mysql_result($dbres,0,"identifier")); -------------------------------------------------------------------------------------------------------------- -------------------------------------------------------------------------------------------------------------- ################################### #Blind SQL Injection vulnerability# ################################### http://localhost/gdl.php?mod=browse&newlang=english&op=comment&page=read&id=injecthere Line : gdl42/main.php 119 parameter : id if ((file_exists("./theme/".$gdl_content->theme."/".$gdl_content->theme."_print.css"))&& ($_GET['mod']== "browse") && ($_GET['op']=="read") && (! empty ($_GET['id'])))