CVE-2012-4414

Multiple SQL injection vulnerabilities in the replication code in Oracle MySQL possibly before 5.5.29, and MariaDB 5.1.x through 5.1.62, 5.2.x through 5.2.12…

published January 22, 2013

CVSS
—
EPSS
3%
Percentile
87.7
In the wild
Unconfirmed
What it is

Multiple SQL injection vulnerabilities in the replication code in Oracle MySQL possibly before 5.5.29, and MariaDB 5.1.x through 5.1.62, 5.2.x through 5.2.12, 5.3.x through 5.3.7, and 5.5.x through 5.5.25, allow remote authenticated users to execute arbitrary SQL commands via vectors related to the binary log. NOTE: as of 20130116, Oracle has not commented on claims from a downstream vendor that the fix in MySQL 5.5.29 is incomplete.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03119 · 87.7th percentile
Published
2013-01-22T23:00Z
EPSS history
Timeline
  • 22 JAN 23:00Z
    Multiple SQL injection vulnerabilities in the replication code in Oracle MySQL possibly before 5.5.29, and MariaDB 5.1.x through 5.1.62, 5.2.x through 5.2.12…
    cvelistv5