← voltar
CVE-2011-2703

CVE-2011-2703

EPSS 2.7%
Multiple SQL injection vulnerabilities in MapServer before 4.10.7, 5.x before 5.6.7, and 6.x before 6.0.1 allow remote attackers to execute arbitrary SQL commands via vectors related to (1) OGC filter encoding or (2) WMS time support.
Produtos afetados
n/a · n/a

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
http://lists.osgeo.org/pipermail/mapserver-users/2011-July/069430.htmlhttps://bugzilla.redhat.com/show_bug.cgi?id=722545https://bugzilla.redhat.com/show_bug.cgi?id=723293http://secunia.com/advisories/45257http://secunia.com/advisories/45318http://secunia.com/advisories/45368https://exchange.xforce.ibmcloud.com/vulnerabilities/68682http://trac.osgeo.org/mapserver/ticket/3903http://www.debian.org/security/2011/dsa-2285http://www.openwall.com/lists/oss-security/2011/07/19/11http://www.openwall.com/lists/oss-security/2011/07/19/14http://www.openwall.com/lists/oss-security/2011/07/20/15