CVE-2012-4254

Description

References

• packetstormsecurity.org/files/112304/MySQLDumper-1.24.4-LFI-XSS-CSRF-Code-Execution-Traversal.html · Exploit
• osvdb.org/81616
• securityfocus.com/bid/53306 · Exploit
• exchange.xforce.ibmcloud.com/vulnerabilities/75287

Weitere Schwachstellen in mysqldumper

• CVE-2017-1000012MITTEL 6.1MySQL Dumper version 1.24 is vulnerable to stored XSS when displaying the data in the database to the user
• CVE-2012-4255MITTEL 4.3MySQLDumper 1.24.4 allows remote attackers to obtain sensitive information via a direct request to learn/cubemail/refresh_dblist.php, which …
• CVE-2012-4253MITTEL 4.3Multiple directory traversal vulnerabilities in MySQLDumper 1.24.4 allow remote attackers to read arbitrary files via a .. (dot dot) in the …
• CVE-2012-4252MITTEL 5.1Multiple cross-site request forgery (CSRF) vulnerabilities in MySQLDumper 1.24.4 allow remote attackers to hijack the authentication of admi…
• CVE-2012-4251MITTEL 4.3Multiple cross-site scripting (XSS) vulnerabilities in MySQLDumper 1.24.4 allow remote attackers to inject arbitrary web script or HTML via …