CVE-2011-2703
- State
- Published
- Severity
- Not scored
- Published
- Aug 1, 2011
- Updated
- Aug 6, 2024
- Reserved
- Jul 11, 2011
Description
Multiple SQL injection vulnerabilities in MapServer before 4.10.7, 5.x before 5.6.7, and 6.x before 6.0.1 allow remote attackers to execute arbitrary SQL commands via vectors related to (1) OGC filter encoding or (2) WMS time support.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 45318third-party-advisory
- http://trac.osgeo.org/mapserver/ticket/3903
- [oss-security] 20110719 CVE Request -- MapServer -- SQL injections in OGC filter encoding and in WMS time support.mailing-list
- 45257third-party-advisory
- DSA-2285vendor-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=723293
- [oss-security] 20110719 CVE Request -- MapServer -- Stack based buffer overflow [was: Re: Re: CVE Request -- MapServer -- SQL injections in OGC filter encoding and in WMS time support.]mailing-list
- 45368third-party-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=722545
- [mapserver-users] 20110713 MapServer 6.0.1, 5.6.7 and 4.10.7 releases with security fixesmailing-list
- mapserver-multiple-sql-injection(68682)vdb-entry
- 48720vdb-entry
- [oss-security] 20110720 Re: CVE Request -- MapServer -- Stack based buffer overflow [was: Re: Re: CVE Request -- MapServer -- SQL injections in OGC filter encoding and in WMS time support.]mailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.