CVE-2006-2753 - CVE House
Back to Database
Status published High CVE-2006-2753

SQL injection vulnerability in MySQL 4.1.x before 4.1.20 and 5.0.x...

Vulnerability Description

SQL injection vulnerability in MySQL 4.1.x before 4.1.20 and 5.0.x before 5.0.22 allows context-dependent attackers to execute arbitrary SQL commands via crafted multibyte encodings in character sets such as SJIS, BIG5, and GBK, which are not properly handled when the mysql_real_escape function is used to escape the input.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2006-2753

Credits & Attribution

No credits recorded in the NVD database.

References

More from mysql

View All →
CVE-2013-1492
Buffer overflow in yaSSL, as used in MySQL 5.1.x before...
High 7.5
CVE-2012-2749
MySQL 5.1.x before 5.1.63 and 5.5.x before 5.5.24 allows remote...
Medium 4
CVE-2012-2102
MySQL 5.1.x before 5.1.62 and 5.5.x before 5.5.22 allows remote...
Low 3.5
CVE-2012-1696
Unspecified vulnerability in the MySQL Server component in Oracle MySQL...
Medium 4
CVE-2012-0583
Unspecified vulnerability in the MySQL Server component in Oracle MySQL...
Medium 4

Affected Vendor

Affected Software

mysql
Vulnerable Versions:
4.1.0, 4.1.2, 4.1.3, 4.1.8, 4.1.10, 4.1.12, 4.1.13, 4.1.14, 4.1.15, 5.0.0, 5.0.1, 5.0.2, 5.0.3, 5.0.4, 5.0.5, 5.0.10, 5.0.15, 5.0.16, 5.0.17, 5.0.20, 4.1.1, 4.1.4, 4.1.5, 4.1.6, 4.1.7, 4.1.9, 4.1.11, 4.1.16, 4.1.17, 4.1.18, 4.1.19, 5.0.6, 5.0.7, 5.0.8, 5.0.9, 5.0.11, 5.0.12, 5.0.13, 5.0.14, 5.0.18, 5.0.19, 5.0.21

Timeline

Official Publish: June 1st, 2006
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.