SQL injection vulnerability in mod_auth_mysql.c in the mod-auth-mysql (aka libapache2-mod-auth-mysql) module for the Apache HTTP Server 2.x, when configured to use a multibyte character set that allows a \ (backslash) as part of the character encoding, allows remote attackers to execute arbitrary SQL commands via unspecified inputs in a login request.
2009-01-22T18:30:00.313
2025-04-09T00:30:58.490
Deferred
CVSSv2: 7.5 (HIGH)
AV:N/AC:L/Au:N/C:P/I:P/A:P
10.0
6.4
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | joey_schulze | mod_auth_mysql | * | Yes |
| Application | apache | http_server | - | No |
| Application | apache | http_server | 2.0 | No |
| Application | apache | http_server | 2.0.9 | No |
| Application | apache | http_server | 2.0.28 | No |
| Application | apache | http_server | 2.0.28 | No |
| Application | apache | http_server | 2.0.28 | No |
| Application | apache | http_server | 2.0.32 | No |
| Application | apache | http_server | 2.0.32 | No |
| Application | apache | http_server | 2.0.32 | No |
| Application | apache | http_server | 2.0.34 | No |
| Application | apache | http_server | 2.0.34 | No |
| Application | apache | http_server | 2.0.35 | No |
| Application | apache | http_server | 2.0.36 | No |
| Application | apache | http_server | 2.0.37 | No |
| Application | apache | http_server | 2.0.38 | No |
| Application | apache | http_server | 2.0.39 | No |
| Application | apache | http_server | 2.0.40 | No |
| Application | apache | http_server | 2.0.41 | No |
| Application | apache | http_server | 2.0.42 | No |
| Application | apache | http_server | 2.0.43 | No |
| Application | apache | http_server | 2.0.44 | No |
| Application | apache | http_server | 2.0.45 | No |
| Application | apache | http_server | 2.0.46 | No |
| Application | apache | http_server | 2.0.46 | No |
| Application | apache | http_server | 2.0.47 | No |
| Application | apache | http_server | 2.0.48 | No |
| Application | apache | http_server | 2.0.49 | No |
| Application | apache | http_server | 2.0.50 | No |
| Application | apache | http_server | 2.0.51 | No |
| Application | apache | http_server | 2.0.52 | No |
| Application | apache | http_server | 2.0.53 | No |
| Application | apache | http_server | 2.0.54 | No |
| Application | apache | http_server | 2.0.55 | No |
| Application | apache | http_server | 2.0.56 | No |
| Application | apache | http_server | 2.0.57 | No |
| Application | apache | http_server | 2.0.58 | No |
| Application | apache | http_server | 2.0.58 | No |
| Application | apache | http_server | 2.0.59 | No |
| Application | apache | http_server | 2.0.60 | No |
| Application | apache | http_server | 2.0.61 | No |
| Application | apache | http_server | 2.1 | No |
| Application | apache | http_server | 2.1.1 | No |
| Application | apache | http_server | 2.1.2 | No |
| Application | apache | http_server | 2.1.3 | No |
| Application | apache | http_server | 2.1.4 | No |
| Application | apache | http_server | 2.1.5 | No |
| Application | apache | http_server | 2.1.6 | No |
| Application | apache | http_server | 2.1.7 | No |
| Application | apache | http_server | 2.1.8 | No |
| Application | apache | http_server | 2.2 | No |
| Application | apache | http_server | 2.2.0 | No |
| Application | apache | http_server | 2.2.1 | No |
| Application | apache | http_server | 2.2.2 | No |
| Application | apache | http_server | 2.2.2 | No |
| Application | apache | http_server | 2.2.3 | No |
| Application | apache | http_server | 2.2.3 | No |
| Application | apache | http_server | 2.2.4 | No |
| Application | apache | http_server | 2.2.6 | No |
| Application | apache | http_server | 2.3.0 | No |