Description
MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, allows remote authenticated users with INSERT and DELETE privileges to execute arbitrary code by using CREATE FUNCTION to access libc calls, as demonstrated by using strcat, on_exit, and exit.
Remediation
References
Related Vulnerabilities
WordPress Plugin Members Import Cross-Site Request Forgery (1.3)
WebLogic CVE-2016-0572 Vulnerability (CVE-2016-0572)
MySQL CVE-2020-2579 Vulnerability (CVE-2020-2579)
WordPress Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2018-14028)
Joomla! Core Multiple Cross-Site Scripting Vulnerabilities (2.5.0 - 3.9.1)