← Database

CVE-2010-1621

MEDIUM CVSS: 5.0 Published: 2010-05-14 Modified: 2026-06-16

Description

The mysql_uninstall_plugin function in sql/sql_plugin.cc in MySQL 5.1 before 5.1.46 does not check privileges before uninstalling a plugin, which allows remote attackers to uninstall arbitrary plugins via the UNINSTALL PLUGIN command.

Affected Platforms

Mysql Mysql

Weakness Type

CWE-264

References