Description

MySQL 5.1 before 5.1.51 and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (infinite loop) via multiple invocations of a (1) prepared statement or (2) stored procedure that creates a query with nested JOIN statements.

Remediation

References

CVE-2010-3839

Related Vulnerabilities

PHP Other Vulnerability (CVE-2015-2301)

Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-27131)

TCExam Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-4238)

WordPress Plugin Social Media Widget by Acurax Cross-Site Request Forgery (3.2.5)

WordPress Plugin Annonces 'theme.php' Arbitrary File Upload (1.2.0.1)

Severity

Medium

Classification

CVE-2010-3839

Tags

Missing Update Known Vulnerabilities