Threat database

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows Path Traversal.This issue affects MapSVG: from n/a through 8.16.1.

Unrestricted Upload of File with Dangerous Type vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows Upload a Web Shell to a Web Server.This issue affects MapSVG: from n/a through 8.16.1.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows Stored XSS.This issue affects MapSVG: from n/a through 8.16.1.

CVE-2026-111399 is a high-severity SQL Injection vulnerability in PT Norther Lights Production's MapSVG product. It affects versions from 0 up to 8.16.1 inclusive. The flaw involves improper neutralization of special elements in SQL commands, allowing an attacker with low privileges and no user interaction to cause a partial confidentiality breach and limited availability impact. The vulnerability has a CVSS 3.1 score of 8.5. No patch or remediation information is provided in the available data.

Missing Authorization vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows Retrieve Embedded Sensitive Data.This issue affects MapSVG: from n/a through 8.16.1.