Unrated severityNVD Advisory· Published Jun 1, 2006· Updated Jun 16, 2026
CVE-2006-2753
CVE-2006-2753
Description
SQL injection vulnerability in MySQL 4.1.x before 4.1.20 and 5.0.x before 5.0.22 allows context-dependent attackers to execute arbitrary SQL commands via crafted multibyte encodings in character sets such as SJIS, BIG5, and GBK, which are not properly handled when the mysql_real_escape function is used to escape the input.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
43cpe:2.3:a:mysql:mysql:4.1.0:*:*:*:*:*:*:*+ 20 more
- cpe:2.3:a:mysql:mysql:4.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:mysql:mysql:4.1.10:*:*:*:*:*:*:*
- cpe:2.3:a:mysql:mysql:4.1.12:*:*:*:*:*:*:*
- cpe:2.3:a:mysql:mysql:4.1.13:*:*:*:*:*:*:*
- cpe:2.3:a:mysql:mysql:4.1.14:*:*:*:*:*:*:*
- cpe:2.3:a:mysql:mysql:4.1.15:*:*:*:*:*:*:*
- cpe:2.3:a:mysql:mysql:4.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:mysql:mysql:4.1.3:*:*:*:*:*:*:*
- cpe:2.3:a:mysql:mysql:4.1.8:*:*:*:*:*:*:*
- cpe:2.3:a:mysql:mysql:5.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:mysql:mysql:5.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:mysql:mysql:5.0.10:*:*:*:*:*:*:*
- cpe:2.3:a:mysql:mysql:5.0.15:*:*:*:*:*:*:*
- cpe:2.3:a:mysql:mysql:5.0.16:*:*:*:*:*:*:*
- cpe:2.3:a:mysql:mysql:5.0.17:*:*:*:*:*:*:*
- cpe:2.3:a:mysql:mysql:5.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:mysql:mysql:5.0.20:*:*:*:*:*:*:*
- cpe:2.3:a:mysql:mysql:5.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:mysql:mysql:5.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:mysql:mysql:5.0.5:*:*:*:*:*:*:*
- (no CPE)range: >=4.1 <4.1.20, >=5.0 <5.0.22
cpe:2.3:a:oracle:mysql:4.1.1:*:*:*:*:*:*:*+ 21 more
- cpe:2.3:a:oracle:mysql:4.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:4.1.11:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:4.1.16:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:4.1.17:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:4.1.18:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:4.1.19:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:4.1.4:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:4.1.5:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:4.1.6:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:4.1.7:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:4.1.9:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.0.11:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.0.12:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.0.13:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.0.14:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.0.18:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.0.19:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.0.21:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.0.6:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.0.7:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.0.8:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.0.9:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
26- lists.mysql.com/announce/364nvdPatch
- www.us-cert.gov/cas/techalerts/TA07-072A.htmlnvdUS Government Resource
- bugs.debian.org/cgi-bin/bugreport.cginvd
- docs.info.apple.com/article.htmlnvd
- lists.apple.com/archives/security-announce/2007/Mar/msg00002.htmlnvd
- secunia.com/advisories/20365nvd
- secunia.com/advisories/20489nvd
- secunia.com/advisories/20531nvd
- secunia.com/advisories/20541nvd
- secunia.com/advisories/20562nvd
- secunia.com/advisories/20625nvd
- secunia.com/advisories/20712nvd
- secunia.com/advisories/24479nvd
- securitytracker.com/idnvd
- www.debian.org/security/2006/dsa-1092nvd
- www.gentoo.org/security/en/glsa/glsa-200606-13.xmlnvd
- www.mandriva.com/security/advisoriesnvd
- www.redhat.com/support/errata/RHSA-2006-0544.htmlnvd
- www.securityfocus.com/bid/18219nvd
- www.trustix.org/errata/2006/0034/nvd
- www.ubuntu.com/usn/usn-288-3nvd
- www.vupen.com/english/advisories/2006/2105nvd
- www.vupen.com/english/advisories/2007/0930nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/26875nvd
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10312nvd
- usn.ubuntu.com/303-1/nvd
News mentions
0No linked articles in our index yet.