Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
MySQL before 5.1.18 allows remote authenticated users without SELECT privileges to obtain sensitive information from partitioned tables via an ALTER TABLE statement.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
MySQL Alter Table函数信息泄露漏洞
Vulnerability Description
Oracle MySQL是美国甲骨文（Oracle）公司的一套开源的关系数据库管理系统。该数据库系统具有性能高、成本低、可靠性好等特点。 MySQL Alter Table功能实现上存在漏洞，能够以合法帐号登录到数据库系统的攻击者可能利用此漏洞非授权获取数据表相关的敏感信息。 如果用户对表格拥有ALTER权限的话，则即使没有SELECT权限也可以通过ALTER TABLE语句获得某些有关表格的敏感信息。例如，用户可以发布以下命令： ALTER TABLE table1 PARTITION BY LIST
CVSS Information
N/A
Vulnerability Type
N/A