CVE-2013-7262
05.01.2014, 20:55
SQL injection vulnerability in the msPostGISLayerSetTimeFilter function in mappostgis.c in MapServer before 6.4.1, when a WMS-Time service is used, allows remote attackers to execute arbitrary SQL commands via a crafted string in a PostGIS TIME filter.
| Vendor | Product | Version |
|---|---|---|
| osgeo | mapserver | 𝑥 ≤ 6.4.0 |
| osgeo | mapserver | 4.2.0:beta1 |
| osgeo | mapserver | 4.4.0 |
| osgeo | mapserver | 4.4.0:beta1 |
| osgeo | mapserver | 4.4.0:beta2 |
| osgeo | mapserver | 4.4.0:beta3 |
| osgeo | mapserver | 4.6.0 |
| osgeo | mapserver | 4.6.0:beta1 |
| osgeo | mapserver | 4.6.0:beta2 |
| osgeo | mapserver | 4.6.0:beta3 |
| osgeo | mapserver | 4.6.0:rc1 |
| osgeo | mapserver | 4.8.0:beta1 |
| osgeo | mapserver | 4.8.0:beta2 |
| osgeo | mapserver | 4.8.0:beta3 |
| osgeo | mapserver | 4.8.0:rc1 |
| osgeo | mapserver | 4.8.0:rc2 |
| osgeo | mapserver | 4.10.0 |
| osgeo | mapserver | 4.10.0:beta1 |
| osgeo | mapserver | 4.10.0:beta2 |
| osgeo | mapserver | 4.10.0:beta3 |
| osgeo | mapserver | 4.10.0:rc1 |
| osgeo | mapserver | 4.10.1 |
| osgeo | mapserver | 4.10.2 |
| osgeo | mapserver | 4.10.3 |
| osgeo | mapserver | 4.10.4 |
| osgeo | mapserver | 4.10.5 |
| osgeo | mapserver | 5.0.0 |
| osgeo | mapserver | 5.0.0:beta1 |
| osgeo | mapserver | 5.0.0:beta2 |
| osgeo | mapserver | 5.0.0:beta3 |
| osgeo | mapserver | 5.0.0:beta4 |
| osgeo | mapserver | 5.0.0:beta5 |
| osgeo | mapserver | 5.0.0:beta6 |
| osgeo | mapserver | 5.0.0:rc1 |
| osgeo | mapserver | 5.0.0:rc2 |
| osgeo | mapserver | 5.2.0 |
| osgeo | mapserver | 5.2.0:beta1 |
| osgeo | mapserver | 5.2.0:beta2 |
| osgeo | mapserver | 5.2.0:beta3 |
| osgeo | mapserver | 5.2.0:beta4 |
| osgeo | mapserver | 5.2.0:rc1 |
| osgeo | mapserver | 5.2.1 |
| osgeo | mapserver | 5.4.0 |
| osgeo | mapserver | 5.4.0:beta1 |
| osgeo | mapserver | 5.4.0:beta2 |
| osgeo | mapserver | 5.4.0:beta3 |
| osgeo | mapserver | 5.4.0:beta4 |
| osgeo | mapserver | 5.4.0:rc1 |
| osgeo | mapserver | 5.4.0:rc2 |
| osgeo | mapserver | 5.4.1 |
| osgeo | mapserver | 5.4.2 |
| osgeo | mapserver | 5.6.0 |
| osgeo | mapserver | 5.6.1 |
| osgeo | mapserver | 5.6.3 |
| osgeo | mapserver | 6.0.1 |
| osgeo | mapserver | 6.0.2 |
| osgeo | mapserver | 6.0.3 |
| osgeo | mapserver | 6.2.0 |
| osgeo | mapserver | 6.2.1 |
| umn | mapserver | 5.2.3 |
| umn | mapserver | 5.6.7 |
| umn | mapserver | 6.0.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
References