CVE-2010-1848

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

3.12%

Published

Jun 7, 2010

Modified

Apr 28, 2026

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Directory traversal vulnerability in MySQL 5.0 through 5.0.91 and 5.1 before 5.1.47 allows remote authenticated users to bypass intended table grants to read field definitions of arbitrary tables, and on 5.1 to read or delete content of arbitrary tables, via a .. (dot dot) in a table name.

Weaknesses (CWE)

CWE-22

Affected Products (85)

mysql · mysqlvulnerable

mysql · mysql

References (20)

http://bugs.mysql.com/bug.php?id=53371

http://dev.mysql.com/doc/refman/5.0/en/news-5-0-91.html

http://dev.mysql.com/doc/refman/5.1/en/news-5-1-47.html

http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html

http://lists.mysql.com/commits/107532

http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html

http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00005.html

http://securitytracker.com/id?1024031

http://support.apple.com/kb/HT4435

KEV Catalog EPSS Scores Vendors All CVEs