mirror of
https://github.com/0xMarcio/cve.git
synced 2025-05-28 01:04:30 +00:00
777 B
777 B
CVE-2013-7262
Description
SQL injection vulnerability in the msPostGISLayerSetTimeFilter function in mappostgis.c in MapServer before 6.4.1, when a WMS-Time service is used, allows remote attackers to execute arbitrary SQL commands via a crafted string in a PostGIS TIME filter.
POC
Reference
- https://github.com/mapserver/mapserver/issues/4834
- https://github.com/mapserver/mapserver/issues/4834
Github
No PoCs found on GitHub currently.