CVE-2006-0903
MySQL <= 5.0.18 - Log Bypass via NULL Character in mysql_real_query
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2006-0903. PoCs published by 1dt.w0lf.
AI-analyzed exploit summary This exploit demonstrates a query-logging bypass in MySQL by injecting a NULL byte into a comment, causing the query to execute without being logged. It leverages a discrepancy in how NULL bytes are handled between query execution and logging.
Description
MySQL 5.0.18 and earlier allows local users to bypass logging mechanisms via SQL queries that contain the NULL character, which are not properly handled by the mysql_real_query function. NOTE: this issue was originally reported for the mysql_query function, but the vendor states that since mysql_query expects a null character, this is not an issue for mysql_query.
Exploits (1)
This exploit demonstrates a query-logging bypass in MySQL by injecting a NULL byte into a comment, causing the query to execute without being logged. It leverages a discrepancy in how NULL bytes are handled between query execution and logging.