CVE-2006-2753
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
3Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackepss 3.5%
SQL injection vulnerability in MySQL 4.1.x before 4.1.20 and 5.0.x before 5.0.22 allows context-dependent attackers to execute arbitrary SQL commands via crafted multibyte encodings in character sets such as SJIS, BIG5, and GBK, which are not properly handled when the mysql_real_escape function is used to escape the input.
Productos afectados
n/a · n/aReferencias
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=369735http://docs.info.apple.com/article.html?artnum=305214http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.htmlhttp://lists.mysql.com/announce/364http://secunia.com/advisories/20365http://secunia.com/advisories/20489http://secunia.com/advisories/20531http://secunia.com/advisories/20541http://secunia.com/advisories/20562http://secunia.com/advisories/20625http://secunia.com/advisories/20712http://secunia.com/advisories/24479