Multiple SQL injection vulnerabilities in MapServer before 4.10.7, 5.x before 5.6.7, and 6.x before 6.0.1 allow remote attackers to execute arbitrary SQL commands via vectors related to (1) OGC filter encoding or (2) WMS time support.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
History
21 Nov 2024, 01:28
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://lists.osgeo.org/pipermail/mapserver-users/2011-July/069430.html - Patch | |
| References | () http://secunia.com/advisories/45257 - Vendor Advisory | |
| References | () http://secunia.com/advisories/45318 - Vendor Advisory | |
| References | () http://secunia.com/advisories/45368 - Vendor Advisory | |
| References | () http://trac.osgeo.org/mapserver/ticket/3903 - Patch | |
| References | () http://www.debian.org/security/2011/dsa-2285 - | |
| References | () http://www.openwall.com/lists/oss-security/2011/07/19/11 - Patch | |
| References | () http://www.openwall.com/lists/oss-security/2011/07/19/14 - Patch | |
| References | () http://www.openwall.com/lists/oss-security/2011/07/20/15 - Patch | |
| References | () http://www.securityfocus.com/bid/48720 - | |
| References | () https://bugzilla.redhat.com/show_bug.cgi?id=722545 - Patch | |
| References | () https://bugzilla.redhat.com/show_bug.cgi?id=723293 - Patch | |
| References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/68682 - |
Information
Published : 2011-08-01 19:55
Updated : 2024-11-21 01:28
NVD link : CVE-2011-2703
Mitre link : CVE-2011-2703
CVE.ORG link : CVE-2011-2703
JSON object : View
Products Affected
osgeo
- mapserver
umn
- mapserver
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')