CVE-2012-4251

概要

参考情報

• packetstormsecurity.org/files/112304/MySQLDumper-1.24.4-LFI-XSS-CSRF-Code-Execution-Traversal.html · Exploit
• osvdb.org/81610
• osvdb.org/81611
• osvdb.org/81612
• securityfocus.com/bid/53306 · Exploit
• exchange.xforce.ibmcloud.com/vulnerabilities/75284

mysqldumper のその他の脆弱性

• CVE-2017-1000012中 6.1MySQL Dumper version 1.24 is vulnerable to stored XSS when displaying the data in the database to the user
• CVE-2012-4255中 4.3MySQLDumper 1.24.4 allows remote attackers to obtain sensitive information via a direct request to learn/cubemail/refresh_dblist.php, which …
• CVE-2012-4254中 4.3MySQLDumper 1.24.4 allows remote attackers to obtain sensitive information (Notices) via a direct request to (1) learn/cubemail/restore.php …
• CVE-2012-4253中 4.3Multiple directory traversal vulnerabilities in MySQLDumper 1.24.4 allow remote attackers to read arbitrary files via a .. (dot dot) in the …
• CVE-2012-4252中 5.1Multiple cross-site request forgery (CSRF) vulnerabilities in MySQLDumper 1.24.4 allow remote attackers to hijack the authentication of admi…