CVE-2021-32062: Improper Limitation of a Pathname to a Restricted Directory

MapServer before 7.0.8, 7.1.x and 7.2.x before 7.2.3, 7.3.x and 7.4.x before 7.4.5, and 7.5.x and 7.6.x before 7.6.3 does not properly enforce the MSMAPNOPATH and MSMAPPATTERN restrictions that are intended to control the locations from which a mapfile may be loaded with MapServer CGI...

PT-2021-19646

Name of the Vulnerable Software and Affected Versions: MapServer versions 7.0.0 through 7.0.7 MapServer versions 7.1.x MapServer versions 7.2.x through 7.2.2 MapServer versions 7.3.x MapServer versions 7.4.x through 7.4.4 MapServer versions 7.5.x MapServer versions 7.6.x through 7.6.2 Description...

CVE-2012-2950

Gateway Geomatics MapServer for Windows before 3.0.6 contains a Local File Include Vulnerability which allows remote attackers to execute local PHP code and obtain sensitive information...

Design/Logic Flaw

Gateway Geomatics MapServer for Windows before 3.0.6 contains a Local File Include Vulnerability which allows remote attackers to execute local PHP code and obtain sensitive information...

CVE-2012-2950

Gateway Geomatics MapServer for Windows before 3.0.6 contains a Local File Include Vulnerability which allows remote attackers to execute local PHP code and obtain sensitive information...

CVE-2012-2950

CVE-2012-2950 affects Gateway Geomatics MapServer for Windows (MS4W). The vulnerability is a Local File Inclusion in the bundled Apache/PHP configuration that allows remote attackers to view arbitrary files and execute PHP code with SYSTEM privileges. Affected releases are the MS4W packages up to...

PT-2020-7212

Name of the Vulnerable Software and Affected Versions Gateway Geomatics MapServer for Windows versions prior to 3.0.6 Description The issue allows remote attackers to execute local PHP code and obtain sensitive information due to a Local File Include Vulnerability. Recommendations For versions...

CVE-2012-2950: Unrestricted Upload of File with Dangerous Type

Gateway Geomatics MapServer for Windows before 3.0.6 contains a Local File Include Vulnerability which allows remote attackers to execute local PHP code and obtain sensitive information...

Mapserver Input Validation Error Vulnerability

Mapserver is the Open Source Geospatial OSGeo Foundation's suite of open source platforms for publishing spatial data and interactive map applications to the Web. An input validation error vulnerability in Mapserver versions 5.2, 5.4, and 5.6 prior to 5.6.5-2, which stems from the program failing...

DEBIAN-CVE-2010-1678

Mapserver 5.2, 5.4 and 5.6 before 5.6.5-2 improperly validates symbol index values during Mapfile parsing...

CVE-2010-1678

Mapserver 5.2, 5.4 and 5.6 before 5.6.5-2 improperly validates symbol index values during Mapfile parsing...

CVE-2010-1678

Mapserver 5.2, 5.4 and 5.6 before 5.6.5-2 improperly validates symbol index values during Mapfile parsing...

Design/Logic Flaw

Mapserver 5.2, 5.4 and 5.6 before 5.6.5-2 improperly validates symbol index values during Mapfile parsing...

CVE-2010-1678

Mapserver 5.2, 5.4 and 5.6 before 5.6.5-2 improperly validates symbol index values during Mapfile parsing...

CVE-2010-1678

Mapserver 5.2, 5.4 and 5.6 before 5.6.5-2 improperly validates symbol index values during Mapfile parsing...

CVE-2010-1678

Mapserver 5.2, 5.4 and 5.6 before 5.6.5-2 contain an input validation error in Mapfile parsing due to improper validation of symbol index values. This can lead to a segmentation fault/crash. A fix is available in 5.6.5-2 (and later); upgrading is recommended.

CVE-2010-1678

Mapserver 5.2, 5.4 and 5.6 before 5.6.5-2 improperly validates symbol index values during Mapfile parsing...

CVE-2010-1678: Improper Input Validation

Mapserver 5.2, 5.4 and 5.6 before 5.6.5-2 improperly validates symbol index values during Mapfile parsing...

PT-2019-6533

Name of the Vulnerable Software and Affected Versions Mapserver versions 5.2 through 5.6 before 5.6.5-2 Description The issue is related to improper validation of symbol index values during Mapfile parsing. Recommendations For Mapserver versions 5.2 through 5.6 before 5.6.5-2, update to version...

CVE-2009-2281

Multiple heap-based buffer underflows in the readPostBody function in cgiutil.c in mapserv in MapServer 4.x through 4.10.4 and 5.x before 5.4.2 allow remote attackers to execute arbitrary code via 1 a crafted Content-Length HTTP header or 2 a large HTTP request, related to an integer overflow tha...