Lucene search
+L

6 matches found

Mageia
Mageia
•added 2015/03/06 6:08 p.m.•41 views

Updated mapserver packages fix CVE-2013-7262 and packaging issues

Updated mapserver packages fix security vulnerability: SQL injection vulnerability in the msPostGISLayerSetTimeFilter function in mappostgis.c in MapServer before 6.4.1, when a WMS-Time service is used, allows remote attackers to execute arbitrary SQL commands via a crafted string in a PostGIS TI...

6.8CVSS4.8AI score0.0222EPSS
SaveExploits1References3
NVD
NVD
•added 2014/01/05 8:55 p.m.•30 views

CVE-2013-7262

SQL injection vulnerability in the msPostGISLayerSetTimeFilter function in mappostgis.c in MapServer before 6.4.1, when a WMS-Time service is used, allows remote attackers to execute arbitrary SQL commands via a crafted string in a PostGIS TIME filter...

6.8CVSS8AI score0.0222EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
•added 2014/01/05 8:55 p.m.•27 views

CVE-2013-7262

SQL injection vulnerability in the msPostGISLayerSetTimeFilter function in mappostgis.c in MapServer before 6.4.1, when a WMS-Time service is used, allows remote attackers to execute arbitrary SQL commands via a crafted string in a PostGIS TIME filter...

6.8CVSS6.2AI score0.0222EPSS
SaveExploits1References4
CVE
CVE
•added 2014/01/05 8:00 p.m.•97 views

CVE-2013-7262

The vulnerability CVE-2013-7262 affects MapServer (MapServer before 6.4.1) in the msPostGISLayerSetTimeFilter function (mappostgis.c). When using a WMS-Time service, a crafted PostGIS TIME filter can lead to remote SQL command execution, exposing SQL injection risk with partial confidentiality/in...

6.8CVSS8.2AI score0.0222EPSS
SaveExploits1References4Affected Software2
Debian CVE
Debian CVE
•added 2014/01/05 8:00 p.m.•71 views

CVE-2013-7262

SQL injection vulnerability in the msPostGISLayerSetTimeFilter function in mappostgis.c in MapServer before 6.4.1, when a WMS-Time service is used, allows remote attackers to execute arbitrary SQL commands via a crafted string in a PostGIS TIME filter...

6.8CVSS8.1AI score0.0222EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/01/05 12:00 a.m.•3 views

CVE-2013-7262: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the msPostGISLayerSetTimeFilter function in mappostgis.c in MapServer before 6.4.1, when a WMS-Time service is used, allows remote attackers to execute arbitrary SQL commands via a crafted string in a PostGIS TIME filter...

6.8CVSS6.4AI score0.0222EPSS
SaveExploits1References2
Rows per page
Query Builder