CVE-2010-1848: mysql Path Traversal
CVSS: 6.5v2.0MediumModified
Published 07-06-2010Last modified 07-08-2024
Vulnerability summary
CVE-2010-1848 is a medium (CVSS 6.5) Path Traversal vulnerability in mysql. EPSS estimates a 3.12% chance of exploitation in the next 30 days, higher than 87.6% of scored vulnerabilities.
CVSS score
6.5/10
010
Medium · v2.0 (NVD)EPSS score
3.12%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 3Timeline
- 07-06-2010PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
Directory traversal vulnerability in MySQL 5.0 through 5.0.91 and 5.1 before 5.1.47 allows remote authenticated users to bypass intended table grants to read field definitions of arbitrary tables, and on 5.1 to read or delete content of arbitrary tables, via a .. (dot dot) in a table name.
CVSS metrics
1 score · 1 source · 1 versionMedium 6.5Preferred score · NVD (NIST)
AV:N/AC:L/Au:S/C:P/I:P/A:PSourcesSingle source
EPSS trend
Probability
3.12%
Chance of exploitation in the next 30 days
Percentile
88%
Versus all other CVEs
30-day change
0.00 pp
From 3.12% on 20-09-2026
20-09-202620-10-2026
EPSS score3.12%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Mysql1 product
- mysql5.0.0 | 5.0.1 | 5.0.2 | 5.0.3 | 5.0.4 | 5.0.5 | 5.0.5.0.21 | 5.0.10 | 5.0.15 | 5.0.16 | 5.0.17 | 5.0.20 | 5.0.24 | 5.0.45b | 5.0.82 | 5.0.84 | 5.0.87 | 5.1.5 | 5.1.23 | 5.1.31 | 5.1.32 | 5.1.34 | 5.1.37
Oracle1 product
- mysql5.0.0:alpha | 5.0.3:beta | 5.0.6 | 5.0.7 | 5.0.8 | 5.0.9 | 5.0.11 | 5.0.12 | 5.0.13 | 5.0.14 | 5.0.18 | 5.0.19 | 5.0.21 | 5.0.22 | 5.0.23 | 5.0.27 | 5.0.33 | 5.0.37 | 5.0.41 | 5.0.45 | 5.0.51 | 5.0.67 | 5.0.75 | 5.0.77 | 5.0.81 | 5.0.83 | 5.0.85 | 5.0.86 | 5.0.88 | 5.0.89 | 5.0.90 | 5.0.91 | 5.1 | 5.1.1 | 5.1.2 | 5.1.3 | 5.1.4 | 5.1.6 | 5.1.7 | 5.1.8 | 5.1.9 | 5.1.10 | 5.1.11 | 5.1.12 | 5.1.13 | 5.1.14 | 5.1.15 | 5.1.16 | 5.1.17 | 5.1.30 | 5.1.33 | 5.1.35 | 5.1.36 | 5.1.38 | 5.1.39 | 5.1.40 | 5.1.41 | 5.1.42 | 5.1.43 | 5.1.44 | 5.1.45 | 5.1.46
2 vendors · 2 products
References
15 links- support.apple.com/kb/HT4435X Refsource CONFIRM
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10258VDB EntrySignatureX Refsource OVAL
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7210VDB EntrySignatureX Refsource OVAL
- dev.mysql.com/doc/refman/5.1/en/news-5-1-47.htmlX Refsource CONFIRM
- lists.mysql.com/commits/107532X Refsource MISC
- bugs.mysql.com/bug.php?id=53371X Refsource CONFIRM
- dev.mysql.com/doc/refman/5.0/en/news-5-0-91.htmlX Refsource CONFIRM