Description

The mysql_change_db function in MySQL 5.0.x before 5.0.40 and 5.1.x before 5.1.18 does not restore THD::db_access privileges when returning from SQL SECURITY INVOKER stored routines, which allows remote authenticated users to gain privileges.

Remediation

References

CVE-2007-2692

Related Vulnerabilities

WordPress Plugin WooCommerce-Store Exporter CSV Injection (2.3.1)

Werkzeug WSGI URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2020-28724)

WordPress 4.7.x Multiple Vulnerabilities (4.7 - 4.7.9)

WordPress Plugin Accept Stripe Donation-AidWP Cross-Site Request Forgery (3.1.5)

PrestaShop Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-20001)

Severity

Medium

Classification

CVE-2007-2692

Tags

Missing Update Known Vulnerabilities