Description

Directory traversal vulnerability in MySQL 5.0 through 5.0.91 and 5.1 before 5.1.47 allows remote authenticated users to bypass intended table grants to read field definitions of arbitrary tables, and on 5.1 to read or delete content of arbitrary tables, via a .. (dot dot) in a table name.

Remediation

References

CVE-2010-1848

Related Vulnerabilities

Ruby on Rails Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-3009)

WebLogic CVE-2020-14644 Vulnerability (CVE-2020-14644)

Joomla! Core Multiple Cross-Site Scripting Vulnerabilities (1.5.0 - 3.8.7)

Python Out-of-bounds Read Vulnerability (CVE-2019-15903)

Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-3390)

Severity

Medium

Classification

CVE-2010-1848 CWE-22

Tags

Missing Update Known Vulnerabilities