Vulnerability Database

318,389

Total vulnerabilities in the database

CVE-2011-2703

Multiple SQL injection vulnerabilities in MapServer before 4.10.7, 5.x before 5.6.7, and 6.x before 6.0.1 allow remote attackers to execute arbitrary SQL commands via vectors related to (1) OGC filter encoding or (2) WMS time support.

  • Published: Aug 1, 2011
  • Updated: Nov 9, 2025
  • CVE: CVE-2011-2703
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 7.5
  • AV:N/AC:L/Au:N/C:P/I:P/A:P

CWEs:

OWASP TOP 10:

Software From Fixed in
osgeo / mapserver 4.2.0-beta1 4.2.0-beta1.x
osgeo / mapserver 4.4.0-beta1 4.4.0-beta1.x
osgeo / mapserver 4.4.0-beta2 4.4.0-beta2.x
osgeo / mapserver 4.6.0-beta1 4.6.0-beta1.x
osgeo / mapserver 4.6.0-beta2 4.6.0-beta2.x
osgeo / mapserver 4.6.0-beta3 4.6.0-beta3.x
osgeo / mapserver 4.8.0-beta2 4.8.0-beta2.x
osgeo / mapserver 4.8.0-beta1 4.8.0-beta1.x
osgeo / mapserver 4.8.0-beta3 4.8.0-beta3.x
osgeo / mapserver 4.8.0-rc2 4.8.0-rc2.x
osgeo / mapserver 4.8.0-rc1 4.8.0-rc1.x
osgeo / mapserver 4.10.0 4.10.0.x
osgeo / mapserver 4.10.0-beta1 4.10.0-beta1.x
osgeo / mapserver 4.10.0-rc1 4.10.0-rc1.x
osgeo / mapserver 4.10.0-beta3 4.10.0-beta3.x
osgeo / mapserver 4.10.0-beta2 4.10.0-beta2.x
osgeo / mapserver 4.10.4 4.10.4.x
osgeo / mapserver 4.10.2 4.10.2.x
osgeo / mapserver 4.10.1 4.10.1.x
osgeo / mapserver 4.10.3 4.10.3.x
osgeo / mapserver 4.10.5 4.10.5.x
osgeo / mapserver 4.6.0 4.6.0.x
osgeo / mapserver 4.6.0-rc1 4.6.0-rc1.x
osgeo / mapserver - 4.10.6.x
osgeo / mapserver 4.4.0 4.4.0.x
osgeo / mapserver 4.4.0-beta3 4.4.0-beta3.x
umn / mapserver 5.6.4 5.6.4.x
umn / mapserver 5.2.2 5.2.2.x
umn / mapserver 5.6.5 5.6.5.x
umn / mapserver 5.6.6 5.6.6.x
umn / mapserver 5.2.3 5.2.3.x
osgeo / mapserver 5.0.0-beta5 5.0.0-beta5.x
osgeo / mapserver 5.0.0-beta6 5.0.0-beta6.x
osgeo / mapserver 5.0.0-beta3 5.0.0-beta3.x
osgeo / mapserver 5.0.0-beta4 5.0.0-beta4.x
osgeo / mapserver 5.0.0-beta1 5.0.0-beta1.x
osgeo / mapserver 5.0.0-beta2 5.0.0-beta2.x
osgeo / mapserver 5.0.0-rc1 5.0.0-rc1.x
osgeo / mapserver 5.2.0 5.2.0.x
osgeo / mapserver 5.2.0-beta2 5.2.0-beta2.x
osgeo / mapserver 5.2.0-beta1 5.2.0-beta1.x
osgeo / mapserver 5.2.0-beta3 5.2.0-beta3.x
osgeo / mapserver 5.2.0-beta4 5.2.0-beta4.x
osgeo / mapserver 5.2.0-rc1 5.2.0-rc1.x
osgeo / mapserver 5.2.1 5.2.1.x
osgeo / mapserver 5.4.0 5.4.0.x
osgeo / mapserver 5.4.0-beta1 5.4.0-beta1.x
osgeo / mapserver 5.4.0-beta2 5.4.0-beta2.x
osgeo / mapserver 5.4.0-beta4 5.4.0-beta4.x
osgeo / mapserver 5.4.0-beta3 5.4.0-beta3.x
osgeo / mapserver 5.4.0-rc2 5.4.0-rc2.x
osgeo / mapserver 5.4.0-rc1 5.4.0-rc1.x
osgeo / mapserver 5.4.2 5.4.2.x
osgeo / mapserver 5.4.1 5.4.1.x
osgeo / mapserver 5.6.0 5.6.0.x
osgeo / mapserver 5.6.1 5.6.1.x
osgeo / mapserver 5.6.3 5.6.3.x
osgeo / mapserver 5.0.0-rc2 5.0.0-rc2.x
osgeo / mapserver 5.0.0 5.0.0.x
umn / mapserver 6.0.0-rc2 6.0.0-rc2.x
umn / mapserver 6.0.0-beta3 6.0.0-beta3.x
umn / mapserver 6.0.0-beta5 6.0.0-beta5.x
umn / mapserver 6.0.0-rc1 6.0.0-rc1.x
umn / mapserver 6.0.0-beta1 6.0.0-beta1.x
umn / mapserver 6.0.0 6.0.0.x
umn / mapserver 6.0.0-beta7 6.0.0-beta7.x
umn / mapserver 6.0.0-beta6 6.0.0-beta6.x
umn / mapserver 6.0.0-beta4 6.0.0-beta4.x
umn / mapserver 6.0.0-beta2 6.0.0-beta2.x