Description

The COM_CHANGE_USER command in MySQL 3.x before 3.23.54, and 4.x to 4.0.6, allows remote attackers to execute arbitrary code via a long response.

Remediation

References

CVE-2002-1375

Related Vulnerabilities

WordPress Plugin Client Invoicing by Sprout Invoices-Easy Estimates and Invoices for WordPress Cross-Site Scripting (6.1)

WordPress Plugin Relevanssi-A Better Search Cross-Site Scripting (3.3.7.1)

Jenkins Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-5321)

WordPress Plugin Product Addons & Fields for WooCommerce Cross-Site Scripting (32.0.5)

WordPress Plugin Advanced Custom Fields (ACF) Cross-Site Scripting (4.4.3)

Severity

High

Classification

CVE-2002-1375

Tags

Missing Update Known Vulnerabilities