cve/2009/CVE-2009-0819.md

CVE-2009-0819

Description

sql/item_xmlfunc.cc in MySQL 5.1 before 5.1.32 and 6.0 before 6.0.10 allows remote authenticated users to cause a denial of service (crash) via "an XPath expression employing a scalar expression as a FilterExpr with ExtractValue() or UpdateXML()," which triggers an assertion failure.

POC

Reference

No PoCs from references.

Github

• https://github.com/lekctut/sdb-hw-13-01
• https://github.com/pedr0alencar/vlab-metasploitable2