Description
The mysql_create_function function in sql_udf.cc for MySQL 4.0 before 4.0.25, 4.1 before 4.1.13, and 5.0 before 5.0.7-beta, when running on Windows, uses an incomplete blacklist in a directory traversal check, which allows attackers to include arbitrary files via the backslash (\) character.
Remediation
References
Related Vulnerabilities
e107 Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-2099)
WordPress Plugin RSVPMaker for Toastmasters Cross-Site Request Forgery (3.3.4)
WordPress Plugin RSS Redirect & Feedburner Alternative Unspecified Vulnerability (1.9)
WordPress Plugin BuddyBoss Media Cross-Site Scripting (3.0.3)