CVE-2007-4542

no score yetEPSS 1.6%

Multiple cross-site scripting (XSS) vulnerabilities in MapServer before 4.10.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving the (1) processLine function in maptemplate.c and the (2) writeError function in mapserv.c in the mapserv CGI program.

EPSS: 1.6% chance of exploitation in the next 30 days; higher than 75% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2007-08-27
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

university_of_minnesota:mapserver

References

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=439346
http://mapserver.gis.umn.edu/download/current/HISTORY.TXT/
http://secunia.com/advisories/26561
http://secunia.com/advisories/26718
http://secunia.com/advisories/29688

Check your stack JSON