Description
MongoDB 2.4.x before 2.4.5 and 2.5.x before 2.5.1 allows remote authenticated users to obtain internal system privileges by leveraging a username of __system in an arbitrary database.
Remediation
References
Related Vulnerabilities
WordPress Plugin SEO Smart Links Cross-Site Scripting (3.0.1)
WordPress Plugin Universal Analytics Cross-Site Scripting (1.3.0)
Oracle Database Server CVE-2015-4796 Vulnerability (CVE-2015-4796)
MySQL CVE-2017-3653 Vulnerability (CVE-2017-3653)
WordPress Plugin Circles Gallery Cross-Site Scripting (1.0.10)