Multiple cross-site scripting (XSS) vulnerabilities in MapServer before 4.10.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving the (1) processLine function in maptemplate.c and the (2) writeError function in mapserv.c in the mapserv CGI program.
| Type | CWE ID | Description |
|---|---|---|
| text | N/A | n/a |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| http://trac.osgeo.org/mapserver/attachment/ticket/2256/ms-bug-2256-4.8.patch | x_refsource_MISC |
| http://secunia.com/advisories/29688 | third-party-advisory x_refsource_SECUNIA |
| http://mapserver.gis.umn.edu/download/current/HISTORY.TXT/ | x_refsource_CONFIRM |
| http://trac.osgeo.org/mapserver/ticket/2256 | x_refsource_CONFIRM |
| http://secunia.com/advisories/26561 | third-party-advisory x_refsource_SECUNIA |
| http://secunia.com/advisories/26718 | third-party-advisory x_refsource_SECUNIA |
| https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00096.html | vendor-advisory x_refsource_FEDORA |
| http://www.vupen.com/english/advisories/2007/2974 | vdb-entry x_refsource_VUPEN |
| http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=439346 | x_refsource_MISC |
| http://www.securityfocus.com/bid/25582 | vdb-entry x_refsource_BID |
| http://www.debian.org/security/2008/dsa-1539 | vendor-advisory x_refsource_DEBIAN |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|