SQL Injection Vulnerability in MySQL and MariaDB Products
CVE-2012-2122
Currently unrated
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC🟣 EPSS 96%
What is CVE-2012-2122?
A flaw in the handling of password comparisons in Oracle MySQL and MariaDB allows remote attackers to bypass authentication by repeatedly attempting to login with the same incorrect password. This occurs due to an improper check of the return value from the memcmp function, leading to a situation where a token comparison may succeed erroneously, thus granting unauthorized access.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.