CVE-2006-2753

SQL injection vulnerability in MySQL 4.1.x before 4.1.20 and 5.0.x before 5.0.22 allows context-dependent attackers to execute arbitrary SQL commands via…

published June 1, 2006

CVSS
—
EPSS
4%
Percentile
89.2
In the wild
Unconfirmed
What it is

SQL injection vulnerability in MySQL 4.1.x before 4.1.20 and 5.0.x before 5.0.22 allows context-dependent attackers to execute arbitrary SQL commands via crafted multibyte encodings in character sets such as SJIS, BIG5, and GBK, which are not properly handled when the mysql_real_escape function is used to escape the input.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03536 · 89.2th percentile
Published
2006-06-01T17:00Z
EPSS history
Timeline
  • 01 JUN 17:00Z
    SQL injection vulnerability in MySQL 4.1.x before 4.1.20 and 5.0.x before 5.0.22 allows context-dependent attackers to execute arbitrary SQL commands via…
    cvelistv5