Description

The default configuration in MySQL 3.20.32 through 3.23.52, when running on Windows, does not have logging enabled, which could allow remote attackers to conduct activities without detection.

Remediation

References

CVE-2002-1923

Related Vulnerabilities

Dot CMS Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2020-27848)

Microsoft SQL Server CVE-2023-21705 Vulnerability (CVE-2023-21705)

MySQL CVE-2019-2801 Vulnerability (CVE-2019-2801)

WebLogic CVE-2021-2211 Vulnerability (CVE-2021-2211)

WordPress Plugin Thank You Counter Button Multiple Cross-Site Scripting Vulnerabilities (1.8.7)

Severity

High

Classification

CVE-2002-1923

Tags

Missing Update Known Vulnerabilities