CVE-2007-4542
Multiple cross-site scripting (XSS) vulnerabilities in MapServer before 4.10.3 allow remote...
CVE-2007-4542 is a medium vulnerability (CVSS 4.3) in University Of Minnesota Mapserver, published August 27, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.60%, the 75th percentile. Fixed in mapserver 4.10.3-1.
Multiple cross-site scripting (XSS) vulnerabilities in MapServer before 4.10.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving the (1) processLine function in maptemplate.c and the (2) writeError function in mapserv.c in the mapserv CGI program.
Exploit likelihood
What each source reports
NVD Score used
Multiple cross-site scripting (XSS) vulnerabilities in MapServer before 4.10.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving the (1) processLine function in maptemplate.c and the (2) writeError function in mapserv.c in the mapserv CGI program.
- Record
CVE-2007-4542- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:P/A:N - Weakness
- CWE-79
- Updated
- 2026-11-02
CVE List No score
Multiple cross-site scripting (XSS) vulnerabilities in MapServer before 4.10.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving the (1) processLine function in maptemplate.c and the (2) writeError function in mapserv.c in the mapserv CGI program.
- Record
CVE-2007-4542- Updated
- 2026-11-02
EUVDEUVD-2007-4525 No score
Multiple cross-site scripting (XSS) vulnerabilities in MapServer before 4.10.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving the (1) processLine function in maptemplate.c and the (2) writeError function in mapserv.c in the mapserv CGI program.
- Record
EUVD-2007-4525- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-h6vv-phq2-pfpp No score
Multiple cross-site scripting (XSS) vulnerabilities in MapServer before 4.10.3 allow remote...
Multiple cross-site scripting (XSS) vulnerabilities in MapServer before 4.10.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving the (1) processLine function in maptemplate.c and the (2) writeError function in mapserv.c in the mapserv CGI program.
- Record
GHSA-h6vv-phq2-pfpp- Weakness
- CWE-79
- Updated
- 2026-11-02
OSV No score
Multiple cross-site scripting (XSS) vulnerabilities in MapServer before 4.10.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving the (1) processLine function in maptemplate.c and the (2) writeError function in mapserv.c in the mapserv CGI program.
- Record
CVE-2007-4542- Updated
- 2026-11-02
OSVDEBIAN-CVE-2007-4542 No score
Multiple cross-site scripting (XSS) vulnerabilities in MapServer before 4.10.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving the (1) processLine function in maptemplate.c and the (2) writeError function in mapserv.c in the mapserv CGI program.
- Record
DEBIAN-CVE-2007-4542- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:11037-1 No score
libjavamapscript-7.6.3-1.2 on GA media
These are all security issues fixed in the libjavamapscript-7.6.3-1.2 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:11037-1- Updated
- 2026-11-02
Affected products
Affected packages
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | aliases | |
| 2026-11-02 | affected, aliases, facts, references, title | GitHub Advisories, OSV |
| 2026-11-02 | created | CVE List, NVD |
References
trac.osgeo.org/mapserver/attachment/ticket/2256/ms-bug-2256-4.8.patch
secunia.com/advisories/29688
mapserver.gis.umn.edu/download/current/HISTORY.TXT
Show 11 moreShow less
redhat.com/archives/fedora-package-announce/2007-September/msg00096.html
vupen.com/english/advisories/2007/2974
bugs.debian.org/cgi-bin/bugreport.cgi?bug=439346
securityfocus.com/bid/25582
debian.org/security/2008/dsa-1539
nvd.nist.gov/vuln/detail/CVE-2007-4542
github.com/advisories/GHSA-h6vv-phq2-pfpp
security-tracker.debian.org/tracker/CVE-2007-4542
suse.com/security/cve/CVE-2007-4542