Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The msLoadQuery function in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2 allows remote attackers to determine the existence of arbitrary files via a full pathname in the queryfile parameter, which triggers different error messages depending on whether this pathname exists.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
MapServer 输入验证错误漏洞
Vulnerability Description
Mapserver是开源地理空间（Osgeo）基金会的一套用于将空间数据和交互式地图应用程序发布到Web的开源平台。 MapServer 存在输入验证错误漏洞，该漏洞源于mapserv CGI程序对系统中是否存在的文件会返回不同的错误消息，远程攻击者可以利用queryfile请求参数判断是否存在特定的文件。
CVSS Information
N/A
Vulnerability Type
N/A