CVE-2011-2703

Published Aug 1, 2011 CVSS 2.0 · 7.5 High EPSS 2.7% KEV · Not listed
Description
Multiple SQL injection vulnerabilities in MapServer before 4.10.7, 5.x before 5.6.7, and 6.x before 6.0.1 allow remote attackers to execute arbitrary SQL commands via vectors related to (1) OGC filter encoding or (2) WMS time support.

Analysis

No analysis available yet

Remediation

No remediation available yet

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-2285-1 mapserver security update
EUVD EUVD EUVD-2011-2684 Multiple SQL injection vulnerabilities in MapServer before 4.10.7, 5.x before 5.6.7, and 6.x before 6.0.1 allow remote attackers to execute arbitrary SQL commands via vectors related to (1) OGC filter encoding or (2) WMS time support.
History

No history.

Weaknesses
  • CWE-89

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 6, 2024, 11:08 PM
Reserved
Jul 11, 2011, 12:00 AM
Status
Modified
Published
Aug 1, 2011, 7:55 PM
Modified
Jun 16, 2026, 11:31 PM