CVE-2011-2703

Published: Aug 1, 2011Modified: Apr 29, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Multiple SQL injection vulnerabilities in MapServer before 4.10.7, 5.x before 5.6.7, and 6.x before 6.0.1 allow remote attackers to execute arbitrary SQL commands via vectors related to (1) OGC filter encoding or (2) WMS time support.

Affected (69)

Products: Osgeo: Mapserver · Umn: Mapserver

1 product

1 product

Configuration A

26 vulnerable

Vulnerable Software	Affected Versions
Osgeo Mapserver	Up to 4.10.6
Osgeo Mapserver	Version 4.10.0
Osgeo Mapserver	Version 4.10.0 beta1
Osgeo Mapserver	Version 4.10.0 beta2
Osgeo Mapserver	Version 4.10.0 beta3
Osgeo Mapserver	Version 4.10.0 rc1
Osgeo Mapserver	Version 4.10.1
Osgeo Mapserver	Version 4.10.2
Osgeo Mapserver	Version 4.10.3
Osgeo Mapserver	Version 4.10.4
Osgeo Mapserver	Version 4.10.5
Osgeo Mapserver	Version 4.2.0 beta1
Osgeo Mapserver	Version 4.4.0
Osgeo Mapserver	Version 4.4.0 beta1
Osgeo Mapserver	Version 4.4.0 beta2
Osgeo Mapserver	Version 4.4.0 beta3
Osgeo Mapserver	Version 4.6.0
Osgeo Mapserver	Version 4.6.0 beta1
Osgeo Mapserver	Version 4.6.0 beta2
Osgeo Mapserver	Version 4.6.0 beta3
Osgeo Mapserver	Version 4.6.0 rc1
Osgeo Mapserver	Version 4.8.0 beta1
Osgeo Mapserver	Version 4.8.0 beta2
Osgeo Mapserver	Version 4.8.0 beta3
Osgeo Mapserver	Version 4.8.0 rc1
Osgeo Mapserver	Version 4.8.0 rc2

Configuration B

33 vulnerable

Vulnerable Software	Affected Versions
Osgeo Mapserver	Version 5.0.0
Osgeo Mapserver	Version 5.0.0 beta1
Osgeo Mapserver	Version 5.0.0 beta2
Osgeo Mapserver	Version 5.0.0 beta3
Osgeo Mapserver	Version 5.0.0 beta4
Osgeo Mapserver	Version 5.0.0 beta5
Osgeo Mapserver	Version 5.0.0 beta6
Osgeo Mapserver	Version 5.0.0 rc1
Osgeo Mapserver	Version 5.0.0 rc2
Osgeo Mapserver	Version 5.2.0
Osgeo Mapserver	Version 5.2.0 beta1
Osgeo Mapserver	Version 5.2.0 beta2
Osgeo Mapserver	Version 5.2.0 beta3
Osgeo Mapserver	Version 5.2.0 beta4
Osgeo Mapserver	Version 5.2.0 rc1
Osgeo Mapserver	Version 5.2.1
Osgeo Mapserver	Version 5.4.0
Osgeo Mapserver	Version 5.4.0 beta1
Osgeo Mapserver	Version 5.4.0 beta2
Osgeo Mapserver	Version 5.4.0 beta3
Osgeo Mapserver	Version 5.4.0 beta4
Osgeo Mapserver	Version 5.4.0 rc1
Osgeo Mapserver	Version 5.4.0 rc2
Osgeo Mapserver	Version 5.4.1
Osgeo Mapserver	Version 5.4.2
Osgeo Mapserver	Version 5.6.0
Osgeo Mapserver	Version 5.6.1
Osgeo Mapserver	Version 5.6.3
Umn Mapserver	Version 5.2.2
Umn Mapserver	Version 5.2.3
Umn Mapserver	Version 5.6.4
Umn Mapserver	Version 5.6.5
Umn Mapserver	Version 5.6.6

Configuration C

10 vulnerable

Vulnerable Software	Affected Versions
Umn Mapserver	Version 6.0.0
Umn Mapserver	Version 6.0.0 beta1
Umn Mapserver	Version 6.0.0 beta2
Umn Mapserver	Version 6.0.0 beta3
Umn Mapserver	Version 6.0.0 beta4
Umn Mapserver	Version 6.0.0 beta5
Umn Mapserver	Version 6.0.0 beta6
Umn Mapserver	Version 6.0.0 beta7
Umn Mapserver	Version 6.0.0 rc1
Umn Mapserver	Version 6.0.0 rc2