mapserver: command execution
| Package(s): | mapserver | CVE #(s): | CVE-2013-7262 | ||||||||||||
| Created: | March 9, 2015 | Updated: | March 20, 2015 | ||||||||||||
| Description: | From the CVE entry:
SQL injection vulnerability in the msPostGISLayerSetTimeFilter function in mappostgis.c in MapServer before 6.4.1, when a WMS-Time service is used, allows remote attackers to execute arbitrary SQL commands via a crafted string in a PostGIS TIME filter | ||||||||||||||
| Alerts: |
| ||||||||||||||