CVE-2013-7262
EPSS 0.18%發布日:2014/1/5修改日:2026/4/28
描述
SQL injection vulnerability in the msPostGISLayerSetTimeFilter function in mappostgis.c in MapServer before 6.4.1, when a WMS-Time service is used, allows remote attackers to execute arbitrary SQL commands via a crafted string in a PostGIS TIME filter.
受影響套件(1)
- Debian/mapserverfrom 0, < 6.4.1-1