113 matches found
MySQL Community Server 5.1 < 5.1.32 XPath Expression DoS
Binary data 4946.prm...
MySQL Community Server 5.0 < 5.0.67 Multiple Vulnerabilities
The version of MySQL Community Server 5.0 installed on the remote host is before 5.0.66. Such versions are reportedly affected by the following issues : - When using a FEDERATED table, a local server could be forced to crash if the remote server returns a result with fewer columns than expected B...
MySQL Community Server < 5.1.23 / 6.0.4 Multiple Vulnerabilities
The version of MySQL Server installed on the remote host reportedly is affected by the following issues : - It is possible, by creating a partitioned table using the DATA DIRECTORY and INDEX DIRECTORY options, to gain privileges on other tables having the same name as the partitioned table. Bug...
MySQL Community Server < 5.1.23 / 6.0.4 Multiple Vulnerabilities
Binary data 4313.prm...
MySQL Community Server 5.0 < 5.0.51 RENAME TABLE Symlink System Table Overwrite
The version of MySQL Community Server installed on the remote host reportedly fails to check whether a file to which a symlink points exists when using RENAME TABLE against a table with explicit DATA DIRECTORY and INDEX DIRECTORY options. A local attacker may be able to leverage this issue to...
mysql malformed password crasher
MySQL Community Server before 5.0.45 allows remote attackers to cause a denial of service daemon crash via a malformed password packet in the connection protocol...
MySQL Community Server 5.0 < 5.0.45 Multiple Vulnerabilities
The version of MySQL Community Server installed on the remote host is reportedly affected by a denial of service vulnerability that can lead to a server crash with a specially crafted password packet. It is also affected by a privilege escalation vulnerability because 'CREATE TABLE LIKE' does not...
Code injection
MySQL Community Server before 5.0.45 allows remote attackers to cause a denial of service daemon crash via a malformed password packet in the connection protocol...
CVE-2007-3780
MySQL Community Server before 5.0.45 allows remote attackers to cause a denial of service daemon crash via a malformed password packet in the connection protocol...
CVE-2007-3782
MySQL Community Server before 5.0.45 allows remote authenticated users to gain update privileges for a table in another database via a view that refers to this external table...
CVE-2007-3781
MySQL Community Server before 5.0.45 does not require privileges such as SELECT for the source table in a CREATE TABLE LIKE statement, which allows remote authenticated users to obtain sensitive information such as the table structure...
CVE-2007-3781
CVE-2007-3781 affects MySQL Community Server prior to 5.0.45. The vulnerability arises because a CREATE TABLE LIKE statement does not require privileges (e.g., SELECT) on the source table, allowing an authenticated remote user to obtain sensitive information such as the table structure. Connected...
CVE-2007-3782
MySQL Community Server before 5.0.45 allows remote authenticated users to gain update privileges for a table in another database via a view that refers to this external table...
CVE-2007-3781
MySQL Community Server before 5.0.45 does not require privileges such as SELECT for the source table in a CREATE TABLE LIKE statement, which allows remote authenticated users to obtain sensitive information such as the table structure...
CVE-2007-3780
MySQL Community Server before 5.0.45 allows remote attackers to cause a denial of service daemon crash via a malformed password packet in the connection protocol...
CVE-2007-3782
CVE-2007-3782 affects MySQL Community Server up to version 5.0.44; remote authenticated users can gain update privileges for a table in another database through a view that refers to an external table. Root cause: a view cross-database reference allows privilege escalation. A fix is available in ...
CVE-2007-0925
Cross-site scripting XSS vulnerability in search/SearchResults.aspx in Community Server allows remote attackers to inject arbitrary web script or HTML via the q parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in search/SearchResults.aspx in Community Server allows remote attackers to inject arbitrary web script or HTML via the q parameter...
CVE-2007-0925
CVE-2007-0925 describes a cross-site scripting (XSS) vulnerability in Community Server’s search/SearchResults.aspx, exploitable via the q parameter to inject arbitrary script/HTML. Affected component is the search results handler; underlying cause is improper handling/encoding of user input in th...