Description

Directory traversal vulnerability in MySQL before 3.23.36 allows local users to modify arbitrary files and gain privileges by creating a database whose name starts with .. (dot dot).

Remediation

References

CVE-2001-0407

Related Vulnerabilities

PHP Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2008-5498)

WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-3414)

PHP Permissions, Privileges, and Access Controls Vulnerability (CVE-2007-3378)

IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-7449)

WordPress 5.8.x Multiple Vulnerabilities (5.8 - 5.8.6)

Severity

Medium

Classification

CVE-2001-0407

Tags

Missing Update Known Vulnerabilities