AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2005-2573

MEDIUM · CVSS 5 EPSS 2.81%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2005-08-16 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2005-2573
Severity
MEDIUM
CVSS
5
EPSS
2.81%
Windows

Original NVD Description

The mysql_create_function function in sql_udf.cc for MySQL 4.0 before 4.0.25, 4.1 before 4.1.13, and 5.0 before 5.0.7-beta, when running on Windows, uses an incomplete blacklist in a directory traversal check, which allows attackers to include arbitrary files via the backslash (\) character.