Description
MySQL 4.1 before 4.1.21 and 5.0 before 5.0.24 allows a local user to access a table through a previously created MERGE table, even after the user's privileges are revoked for the original table, which might violate intended security policy.
Remediation
References
Related Vulnerabilities
MediaWiki Insertion of Sensitive Information into Log File Vulnerability (CVE-2024-47913)
Oracle HTTP Server CVE-2021-2480 Vulnerability (CVE-2021-2480)
WordPress Plugin Appointment Booking Calendar SQL Injection (1.1.23)
SharePoint CVE-2023-21717 Vulnerability (CVE-2023-21717)
WordPress Plugin WP Forum Server Multiple SQL Injection (1.6.5)