Lucene search

CVE-2008-4456

🗓️ 06 Oct 2008 00:00:00Reported by ubuntu.comType

Cross-site scripting (XSS) vulnerability in MySQL 5.0.26 through 5.0.45, and later versions, allows injection of arbitrary web script or HTML via the command-line client when the --html option is enabled

Reporter	Title	Published	Views	Family All 85
NVD	CVE-2008-4456	6 Oct 200823:25	–	nvd
Prion	Cross site scripting	6 Oct 200823:25	–	prion
CVE	CVE-2008-4456	6 Oct 200823:25	–	cve
Cvelist	CVE-2008-4456	6 Oct 200823:00	–	cvelist
OpenVAS	FreeBSD Ports: mysql-client	3 Oct 200800:00	–	openvas
OpenVAS	FreeBSD Ports: mysql-client	3 Oct 200800:00	–	openvas
OpenVAS	Debian: Security Advisory (DSA-1783-1)	8 Mar 202300:00	–	openvas
OpenVAS	SLES9: Security update for MySQL	10 Oct 200900:00	–	openvas
OpenVAS	SLES10: Security update for MySQL	13 Oct 200900:00	–	openvas
OpenVAS	SLES11: Security update for MySQL	11 Oct 200900:00	–	openvas

Source	Link
henlich	www.henlich.de/it-security/mysql-command-line-client-html-injection-vulnerability/
ubuntu	www.ubuntu.com/security/notices/USN-897-1
cve	www.cve.org/CVERecord
nvd	www.nvd.nist.gov/vuln/detail/CVE-2008-4456
launchpad	www.launchpad.net/bugs/cve/CVE-2008-4456
security-tracker	www.security-tracker.debian.org/tracker/CVE-2008-4456

OS	OS Version	Architecture	Package	Package Version	Filename
ubuntu	6.06	noarch	mysql-dfsg-5.0	5.0.22-0ubuntu6.06.12	UNKNOWN
ubuntu	8.04	noarch	mysql-dfsg-5.0	5.0.51a-3ubuntu5.5	UNKNOWN
ubuntu	8.10	noarch	mysql-dfsg-5.0	5.0.67-0ubuntu6.1	UNKNOWN
ubuntu	9.04	noarch	mysql-dfsg-5.0	5.1.30really5.0.75-0ubuntu10.3	UNKNOWN

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

06 Oct 2008 00:00Current

2.3Low risk

Vulners AI Score2.3

CVSS22.6

EPSS0.014