tocsin

Debian/mapserver: unknown

SQL injection vulnerability in common.php in LightNEasy 3.2.1 allows remote attackers to execute arbitrary SQL commands via the userhandle cookie to LightNEasy.php, a different vector than CVE-2008-65

Action: Upgrade mapserver to 5.6.4-1 or later.

Affected

introducedfixedlast affected
05.6.4-1-

Fixed versions

5.6.4-1

Sources

published · modified · JSON