Description

The default configuration in MySQL 3.20.32 through 3.23.52, when running on Windows, does not have logging enabled, which could allow remote attackers to conduct activities without detection.

Remediation

References

CVE-2002-1923

Related Vulnerabilities

WordPress Plugin The Easiest WordPress Media Manager-WP Media Manager Lite includes Backdoor [Only if downloaded via the vendor website] (1.1.2)

OpenSSL Out-of-bounds Read Vulnerability (CVE-2017-3731)

MyBB Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2022-45867)

XWikiplatform Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2024-31985)

Dot CMS Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2017-11466)

Severity

High

Tags

Missing Update Known Vulnerabilities CVE-2002-1923