Description

The default configuration in MySQL 3.20.32 through 3.23.52, when running on Windows, does not have logging enabled, which could allow remote attackers to conduct activities without detection.

Remediation

References

CVE-2002-1923

Related Vulnerabilities

MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-30157)

Sqlite Permissions, Privileges, and Access Controls Vulnerability (CVE-2015-6607)

WordPress Plugin WooCommerce Cross-Site Scripting (2.6.2)

WordPress 4.0.x Multiple Vulnerabilities (4.0 - 4.0.9)

MySQL CVE-2014-6489 Vulnerability (CVE-2014-6489)

Severity

High

Classification

CVE-2002-1923

Tags

Missing Update Known Vulnerabilities