Lucene search

[email protected]NVD:CVE-2006-2753

HistoryJun 01, 2006 - 5:02 p.m.

CVE-2006-2753

2006-06-0117:02:00

[email protected]

web.nvd.nist.gov

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.8

Confidence

Low

EPSS

0.004

Percentile

74.7%

JSON

SQL injection vulnerability in MySQL 4.1.x before 4.1.20 and 5.0.x before 5.0.22 allows context-dependent attackers to execute arbitrary SQL commands via crafted multibyte encodings in character sets such as SJIS, BIG5, and GBK, which are not properly handled when the mysql_real_escape function is used to escape the input.

Affected configurations

Nvd

Node

mysqlmysqlMatch4.1.0

mysqlmysqlMatch4.1.2

mysqlmysqlMatch4.1.3

mysqlmysqlMatch4.1.8

mysqlmysqlMatch4.1.10

mysqlmysqlMatch4.1.12

mysqlmysqlMatch4.1.13

mysqlmysqlMatch4.1.14

mysqlmysqlMatch4.1.15

mysqlmysqlMatch5.0.0

mysqlmysqlMatch5.0.1

mysqlmysqlMatch5.0.2

mysqlmysqlMatch5.0.3

mysqlmysqlMatch5.0.4

mysqlmysqlMatch5.0.5

mysqlmysqlMatch5.0.10

mysqlmysqlMatch5.0.15

mysqlmysqlMatch5.0.16

mysqlmysqlMatch5.0.17

mysqlmysqlMatch5.0.20

oraclemysqlMatch4.1.1

oraclemysqlMatch4.1.4

oraclemysqlMatch4.1.5

oraclemysqlMatch4.1.6

oraclemysqlMatch4.1.7

oraclemysqlMatch4.1.9

oraclemysqlMatch4.1.11

oraclemysqlMatch4.1.16

oraclemysqlMatch4.1.17

oraclemysqlMatch4.1.18

oraclemysqlMatch4.1.19

oraclemysqlMatch5.0.6

oraclemysqlMatch5.0.7

oraclemysqlMatch5.0.8

oraclemysqlMatch5.0.9

oraclemysqlMatch5.0.11

oraclemysqlMatch5.0.12

oraclemysqlMatch5.0.13

oraclemysqlMatch5.0.14

oraclemysqlMatch5.0.18

oraclemysqlMatch5.0.19

oraclemysqlMatch5.0.21

VendorProductVersionCPE
mysqlmysql4.1.0cpe:2.3:a:mysql:mysql:4.1.0:*:*:*:*:*:*:*
mysqlmysql4.1.2cpe:2.3:a:mysql:mysql:4.1.2:*:*:*:*:*:*:*
mysqlmysql4.1.3cpe:2.3:a:mysql:mysql:4.1.3:*:*:*:*:*:*:*
mysqlmysql4.1.8cpe:2.3:a:mysql:mysql:4.1.8:*:*:*:*:*:*:*
mysqlmysql4.1.10cpe:2.3:a:mysql:mysql:4.1.10:*:*:*:*:*:*:*
mysqlmysql4.1.12cpe:2.3:a:mysql:mysql:4.1.12:*:*:*:*:*:*:*
mysqlmysql4.1.13cpe:2.3:a:mysql:mysql:4.1.13:*:*:*:*:*:*:*
mysqlmysql4.1.14cpe:2.3:a:mysql:mysql:4.1.14:*:*:*:*:*:*:*
mysqlmysql4.1.15cpe:2.3:a:mysql:mysql:4.1.15:*:*:*:*:*:*:*
mysqlmysql5.0.0cpe:2.3:a:mysql:mysql:5.0.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
mysql	mysql	4.1.0	cpe:2.3:a:mysql:mysql:4.1.0:::::::*
mysql	mysql	4.1.2	cpe:2.3:a:mysql:mysql:4.1.2:::::::*
mysql	mysql	4.1.3	cpe:2.3:a:mysql:mysql:4.1.3:::::::*
mysql	mysql	4.1.8	cpe:2.3:a:mysql:mysql:4.1.8:::::::*
mysql	mysql	4.1.10	cpe:2.3:a:mysql:mysql:4.1.10:::::::*
mysql	mysql	4.1.12	cpe:2.3:a:mysql:mysql:4.1.12:::::::*
mysql	mysql	4.1.13	cpe:2.3:a:mysql:mysql:4.1.13:::::::*
mysql	mysql	4.1.14	cpe:2.3:a:mysql:mysql:4.1.14:::::::*
mysql	mysql	4.1.15	cpe:2.3:a:mysql:mysql:4.1.15:::::::*
mysql	mysql	5.0.0	cpe:2.3:a:mysql:mysql:5.0.0:::::::*