Vulnerabilities

TI-2008-00283 CVE-2008-0301 · GHSA-v7xw-8rj7-mxq2

Multiple SQL injection vulnerabilities in Mapbender 2.4.4 allow remote attackers to…

LOW 36

Multiple SQL injection vulnerabilities in Mapbender 2.4.4 allow remote attackers to execute arbitrary SQL commands via the gaz parameter to mod_gazetteer_edit.php and other unspecified vectors.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01681 Published 2008-03-11 No fix listed CWE-89

TI-2008-00282 CVE-2008-0300 · GHSA-5f2r-j5h2-8p7f

mapFiler.php in Mapbender 2.4 to 2.4.4 allows remote attackers to execute arbitrary PHP…

LOW 34

mapFiler.php in Mapbender 2.4 to 2.4.4 allows remote attackers to execute arbitrary PHP code via PHP code sequences in the factor parameter, which are not properly handled when accessing a filename that contains those se…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01991 Published 2008-03-11 No fix listed CWE-94

Vulnerabilities

Filters

Multiple SQL injection vulnerabilities in Mapbender 2.4.4 allow remote attackers to…

mapFiler.php in Mapbender 2.4 to 2.4.4 allows remote attackers to execute arbitrary PHP…