CVE-2008-0300: Mapbender

Medium severity, CVSS 6.8. EPSS: 2% chance of exploitation in the next 30 days.

mapFiler.php in Mapbender 2.4 to 2.4.4 allows remote attackers to execute arbitrary PHP code via PHP code sequences in the factor parameter, which are not properly handled when accessing a filename that contains those sequences.

Affected products

• Mapbender Mapbender: version 2.4 only; version 2.4.1 only; version 2.4.2 only; version 2.4.3 only; version 2.4.4 only

Published 2008-03-11. Last modified 2026-06-16.