NVD

Id
4279  
Name
CVE-2008-4456  
Description
Cross-site scripting (XSS) vulnerability in the command-line client in MySQL 5.0.26 through 5.0.45, and other versions including versions later than 5.0.45, when the --html option is enabled, allows attackers to inject arbitrary web script or HTML by placing it in a database cell, which might be accessed by this client when composing an HTML document. NOTE: as of 20081031, the issue has not been fixed in MySQL 5.0.67.  
Reject
 
CVSS Version
2  
CVSS Score
2.6  
Severity
Low  
CVSS Base Score
2.6  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-03  
Published
2008-10-06  
Modified Date
2013-01-22  
Seq
2008-4456  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
27124 4279 CVE-2008-4456 http://bugs.mysql.com/bug.php?id=27884  View
27125 4279 CVE-2008-4456 APPLE-SA-2010-03-29-1  View
27126 4279 CVE-2008-4456 oval:org.mitre.oval:def:11456  View
27127 4279 CVE-2008-4456 20081004 RE: RE: MySQL command-line client HTML injection vulnerability  View
27128 4279 CVE-2008-4456 4357  View
27129 4279 CVE-2008-4456 http://support.apple.com/kb/HT4077  View
27130 4279 CVE-2008-4456 USN-897-1  View
27131 4279 CVE-2008-4456 DSA-1783  View
27132 4279 CVE-2008-4456 http://www.henlich.de/it-security/mysql-command-line-client-html-injection-vulnerability  View
27133 4279 CVE-2008-4456 MDVSA-2009:094  View
27134 4279 CVE-2008-4456 RHSA-2009:1289  View
27135 4279 CVE-2008-4456 RHSA-2010:0110  View
27136 4279 CVE-2008-4456 20080930 MySQL command-line client HTML injection vulnerability  View
27137 4279 CVE-2008-4456 20080930 RE: MySQL command-line client HTML injection vulnerability  View
27138 4279 CVE-2008-4456 20081008 Re: MySQL command-line client HTML injection vulnerability  View
27139 4279 CVE-2008-4456 20081029 Re: MySQL command-line client HTML injection vulnerability  View
27140 4279 CVE-2008-4456 31486  View
27141 4279 CVE-2008-4456 mysql-commandline-xss(45590)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
47114 JVNDB-2008-002424 MySQL のコマンドラインクライアントにおけるクロスサイトスクリプティングの脆弱性 MySQL のコマンドラインクライアントには、--html オプションが有効な場合に、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2008-4456 34569 CVE-2008-4456 4279 2.6 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002424.html 2008-10-06 2010-04-15 View