CVE-2007-2691 in MySQL
Resumen (Inglés)
MySQL before 4.1.23, 5.0.x before 5.0.42, and 5.1.x before 5.1.18 does not require the DROP privilege for RENAME TABLE statements, which allows remote authenticated users to rename arbitrary tables.
Reservar
2007-05-15
Divulgación
2007-05-15
Voces
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerabilidad | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 36812 | MySQL | Prueba de concepto | Arreglo oficial | CVE-2007-2691 |