CVE-2012-4254

概要

参考情報

• packetstormsecurity.org/files/112304/MySQLDumper-1.24.4-LFI-XSS-CSRF-Code-Execution-Traversal.html · Exploit
• osvdb.org/81616
• securityfocus.com/bid/53306 · Exploit
• exchange.xforce.ibmcloud.com/vulnerabilities/75287

mysqldumper のその他の脆弱性

• CVE-2017-1000012中 6.1MySQL Dumper version 1.24 is vulnerable to stored XSS when displaying the data in the database to the user
• CVE-2012-4255中 4.3MySQLDumper 1.24.4 allows remote attackers to obtain sensitive information via a direct request to learn/cubemail/refresh_dblist.php, which …
• CVE-2012-4253中 4.3Multiple directory traversal vulnerabilities in MySQLDumper 1.24.4 allow remote attackers to read arbitrary files via a .. (dot dot) in the …
• CVE-2012-4252中 5.1Multiple cross-site request forgery (CSRF) vulnerabilities in MySQLDumper 1.24.4 allow remote attackers to hijack the authentication of admi…
• CVE-2012-4251中 4.3Multiple cross-site scripting (XSS) vulnerabilities in MySQLDumper 1.24.4 allow remote attackers to inject arbitrary web script or HTML via …