Description

The executable comment feature in MySQL 5.0.x before 5.0.93 and 5.1.x before 5.1.50, when running in certain slave configurations in which the slave is running a newer version than the master, allows remote attackers to execute arbitrary SQL commands via custom comments.

Remediation

References

CVE-2009-5026

Related Vulnerabilities

WordPress Plugin PowerPress Podcasting by Blubrry Cross-Site Scripting (10.0)

ownCloud CVE-2017-9339 Vulnerability (CVE-2017-9339)

MyBB Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-2326)

Dolibarr Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-1010054)

WordPress Plugin Post Views Counter Cross-Site Scripting (1.3.4)

Severity

Medium

Classification

CVE-2009-5026 CWE-138

Tags

Missing Update Known Vulnerabilities