CVE-2006-2753

security flaw

Published Jun 1, 2006 CVSS 2.0 · 7.5 High EPSS 3.5% KEV · Not listed
Description
SQL injection vulnerability in MySQL 4.1.x before 4.1.20 and 5.0.x before 5.0.22 allows context-dependent attackers to execute arbitrary SQL commands via crafted multibyte encodings in character sets such as SJIS, BIG5, and GBK, which are not properly handled when the mysql_real_escape function is used to escape the input.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-1092-1 New MySQL 4.1 packages fix SQL injection
EUVD EUVD EUVD-2006-2752 SQL injection vulnerability in MySQL 4.1.x before 4.1.20 and 5.0.x before 5.0.22 allows context-dependent attackers to execute arbitrary SQL commands via crafted multibyte encodings in character sets such as SJIS, BIG5, and GBK, which are not properly handled when the mysql_real_escape function is used to escape the input.
Ubuntu USN Ubuntu USN USN-288-3 PostgreSQL client vulnerabilities
Ubuntu USN Ubuntu USN USN-303-1 MySQL vulnerability
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 7, 2024, 5:58 PM
Reserved
Jun 1, 2006, 12:00 AM
Status
Modified
Published
Jun 1, 2006, 5:02 PM
Modified
Jun 16, 2026, 10:25 PM
Severity
Important
Public date
May 31, 2006, 12:00 AM