NVD

Id
61438  
Name
CVE-2006-2753  
Description
SQL injection vulnerability in MySQL 4.1.x before 4.1.20 and 5.0.x before 5.0.22 allows context-dependent attackers to execute arbitrary SQL commands via crafted multibyte encodings in character sets such as SJIS, BIG5, and GBK, which are not properly handled when the mysql_real_escape function is used to escape the input.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-06-01  
Modified Date
2011-03-07  
Seq
2006-2753  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
317478 61438 CVE-2006-2753 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=369735  View
317479 61438 CVE-2006-2753 http://docs.info.apple.com/article.html?artnum=305214  View
317480 61438 CVE-2006-2753 APPLE-SA-2007-03-13  View
317481 61438 CVE-2006-2753 http://lists.mysql.com/announce/364  View
317482 61438 CVE-2006-2753 oval:org.mitre.oval:def:10312  View
317483 61438 CVE-2006-2753 1016216  View
317484 61438 CVE-2006-2753 DSA-1092  View
317485 61438 CVE-2006-2753 GLSA-200606-13  View
317486 61438 CVE-2006-2753 MDKSA-2006:097  View
317487 61438 CVE-2006-2753 RHSA-2006:0544  View
317488 61438 CVE-2006-2753 18219  View
317489 61438 CVE-2006-2753 2006-0034  View
317490 61438 CVE-2006-2753 USN-288-3  View
317491 61438 CVE-2006-2753 USN-303-1  View
317492 61438 CVE-2006-2753 TA07-072A  View
317493 61438 CVE-2006-2753 ADV-2006-2105  View
317494 61438 CVE-2006-2753 ADV-2007-0930  View
317495 61438 CVE-2006-2753 mysql-ascii-sql-injection(26875)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58114 JVNDB-2006-000310 MySQL の Improper mysql_real_escape_string() 関数におけるSQL インジェクションの脆弱性 マルチバイト文字セットを使用している MySQL サーバでは、mysql_real_escape_string() 関数によりエスケープされた特定のマルチバイト文字列の処理の不備のため、エスケープ処理を回避され SQL インジェクション攻撃が可能となる脆弱性が存在します。 CVE-2006-2753 18855 CVE-2006-2753 61438 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000310.html 2006-05-31 2007-04-01 View