CVE-2009-5026: MySQL

Medium severity, CVSS 6.8. EPSS: 7.8% chance of exploitation in the next 30 days.

The executable comment feature in MySQL 5.0.x before 5.0.93 and 5.1.x before 5.1.50, when running in certain slave configurations in which the slave is running a newer version than the master, allows remote attackers to execute arbitrary SQL commands via custom comments.

Affected products

• MySQL MySQL: version 5.0.0 only; version 5.0.1 only; version 5.0.2 only; version 5.0.3 only; version 5.0.4 only; version 5.0.5 only; …
• Oracle MySQL: version 5.0.23 only; version 5.0.41 only; version 5.0.45 only; version 5.0.51 only; version 5.0.67 only; version 5.0.75 only; …

Published 2012-08-17. Last modified 2026-06-16.