CVE-2011-2703

Published Aug 1, 2011 CVSS 2.0 · 7.5 High EPSS 2.7% KEV · Not listed
Description
Multiple SQL injection vulnerabilities in MapServer before 4.10.7, 5.x before 5.6.7, and 6.x before 6.0.1 allow remote attackers to execute arbitrary SQL commands via vectors related to (1) OGC filter encoding or (2) WMS time support.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-2285-1 mapserver security update
EUVD EUVD EUVD-2011-2684 Multiple SQL injection vulnerabilities in MapServer before 4.10.7, 5.x before 5.6.7, and 6.x before 6.0.1 allow remote attackers to execute arbitrary SQL commands via vectors related to (1) OGC filter encoding or (2) WMS time support.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 6, 2024, 11:08 PM
Reserved
Jul 11, 2011, 12:00 AM
Status
Modified
Published
Aug 1, 2011, 7:55 PM
Modified
Jun 16, 2026, 11:31 PM