CVE-2009-5026
00h00 +00:00
CVE の説明
CVE の情報
関連する弱点
| 弱点名 | 出典 | |
|---|---|---|
| Improper Neutralization of Special Elements used in an SQL Command The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data. |
メトリクス
| メトリクス | スコア | 深刻度 | CVSS ベクター | 出典 |
|---|---|---|---|---|
| V2 | 6.8 | AV:N/AC:M/Au:N/C:P/I:P/A:P | nvd@nist.gov |
EPSS
EPSSスコア
EPSSパーセンタイル
エクスプロイト情報
Exploit Database EDB-ID : 34796
公開日 : 2010-08-02 22h00 +00:00
著者 : Libing Song
EDB検証済み : Yes
関連製品
構成 0
Mysql>>Mysql >> Version 5.0.0
Mysql>>Mysql >> Version 5.0.1
Mysql>>Mysql >> Version 5.0.2
Mysql>>Mysql >> Version 5.0.3
Mysql>>Mysql >> Version 5.0.4
Mysql>>Mysql >> Version 5.0.5
Mysql>>Mysql >> Version 5.0.10
Mysql>>Mysql >> Version 5.0.15
Mysql>>Mysql >> Version 5.0.16
Mysql>>Mysql >> Version 5.0.17
Mysql>>Mysql >> Version 5.0.20
Mysql>>Mysql >> Version 5.0.24
Mysql>>Mysql >> Version 5.0.45
Mysql>>Mysql >> Version 5.0.82
Mysql>>Mysql >> Version 5.0.84
Mysql>>Mysql >> Version 5.0.87
Oracle>>Mysql >> Version 5.0.23
Oracle>>Mysql >> Version 5.0.41
Oracle>>Mysql >> Version 5.0.45
Oracle>>Mysql >> Version 5.0.51
Oracle>>Mysql >> Version 5.0.67
Oracle>>Mysql >> Version 5.0.75
Oracle>>Mysql >> Version 5.0.77
Oracle>>Mysql >> Version 5.0.81
Oracle>>Mysql >> Version 5.0.83
Oracle>>Mysql >> Version 5.0.85
Oracle>>Mysql >> Version 5.0.86
Oracle>>Mysql >> Version 5.0.88
Oracle>>Mysql >> Version 5.0.89
Oracle>>Mysql >> Version 5.0.90
Oracle>>Mysql >> Version 5.0.91
Oracle>>Mysql >> Version 5.0.92
構成 0
Mysql>>Mysql >> Version 5.1.23
Mysql>>Mysql >> Version 5.1.31
Mysql>>Mysql >> Version 5.1.32
Mysql>>Mysql >> Version 5.1.34
Mysql>>Mysql >> Version 5.1.37
Oracle>>Mysql >> Version 5.1
Oracle>>Mysql >> Version 5.1.1
Oracle>>Mysql >> Version 5.1.2
Oracle>>Mysql >> Version 5.1.3
Oracle>>Mysql >> Version 5.1.4
Oracle>>Mysql >> Version 5.1.10
Oracle>>Mysql >> Version 5.1.11
Oracle>>Mysql >> Version 5.1.12
Oracle>>Mysql >> Version 5.1.13
Oracle>>Mysql >> Version 5.1.14
Oracle>>Mysql >> Version 5.1.15
Oracle>>Mysql >> Version 5.1.16
Oracle>>Mysql >> Version 5.1.17
Oracle>>Mysql >> Version 5.1.18
Oracle>>Mysql >> Version 5.1.19
Oracle>>Mysql >> Version 5.1.20
Oracle>>Mysql >> Version 5.1.21
Oracle>>Mysql >> Version 5.1.22
Oracle>>Mysql >> Version 5.1.23
Oracle>>Mysql >> Version 5.1.24
Oracle>>Mysql >> Version 5.1.25
Oracle>>Mysql >> Version 5.1.26
Oracle>>Mysql >> Version 5.1.27
Oracle>>Mysql >> Version 5.1.28
Oracle>>Mysql >> Version 5.1.29
Oracle>>Mysql >> Version 5.1.30
Oracle>>Mysql >> Version 5.1.31
Oracle>>Mysql >> Version 5.1.33
Oracle>>Mysql >> Version 5.1.34
Oracle>>Mysql >> Version 5.1.35
Oracle>>Mysql >> Version 5.1.36
Oracle>>Mysql >> Version 5.1.37
Oracle>>Mysql >> Version 5.1.38
Oracle>>Mysql >> Version 5.1.39
Oracle>>Mysql >> Version 5.1.40
Oracle>>Mysql >> Version 5.1.40
Oracle>>Mysql >> Version 5.1.41
Oracle>>Mysql >> Version 5.1.42
Oracle>>Mysql >> Version 5.1.43
Oracle>>Mysql >> Version 5.1.43
Oracle>>Mysql >> Version 5.1.44
Oracle>>Mysql >> Version 5.1.45
Oracle>>Mysql >> Version 5.1.46
Oracle>>Mysql >> Version 5.1.46
Oracle>>Mysql >> Version 5.1.47
Oracle>>Mysql >> Version 5.1.48
Oracle>>Mysql >> Version 5.1.49
Oracle>>Mysql >> Version 5.1.49
参考資料
Tags : vendor-advisory, x_refsource_SUSE
