CVE-2013-7262

2014-01-05T15:55:04
ID CVE-2013-7262
Type cve
Reporter NVD
Modified 2015-10-08T10:45:16

Description

SQL injection vulnerability in the msPostGISLayerSetTimeFilter function in mappostgis.c in MapServer before 6.4.1, when a WMS-Time service is used, allows remote attackers to execute arbitrary SQL commands via a crafted string in a PostGIS TIME filter.