← back
CVE-2011-2703

CVE-2011-2703

EPSS 2.7%
Multiple SQL injection vulnerabilities in MapServer before 4.10.7, 5.x before 5.6.7, and 6.x before 6.0.1 allow remote attackers to execute arbitrary SQL commands via vectors related to (1) OGC filter encoding or (2) WMS time support.
Affected products
n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://lists.osgeo.org/pipermail/mapserver-users/2011-July/069430.htmlhttps://bugzilla.redhat.com/show_bug.cgi?id=722545https://bugzilla.redhat.com/show_bug.cgi?id=723293http://secunia.com/advisories/45257http://secunia.com/advisories/45318http://secunia.com/advisories/45368https://exchange.xforce.ibmcloud.com/vulnerabilities/68682http://trac.osgeo.org/mapserver/ticket/3903http://www.debian.org/security/2011/dsa-2285http://www.openwall.com/lists/oss-security/2011/07/19/11http://www.openwall.com/lists/oss-security/2011/07/19/14http://www.openwall.com/lists/oss-security/2011/07/20/15