Published: 13/08/2012 Updated: 29/08/2017

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 450

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Multiple cross-site scripting (XSS) vulnerabilities in MySQLDumper 1.24.4 allow remote malicious users to inject arbitrary web script or HTML via the (1) page parameter to index.php, (2) phase parameter to install.php, (3) tablename or (4) dbid parameter to sql.php, or (5) filename parameter to restore.php in learn/cubemail/.

Vulnerable Product	Search on Vulmon	Subscribe to Product
mysqldumper mysqldumper 1.24.4

source: wwwsecurityfocuscom/bid/53306/info MySQLDumper is prone to multiple security vulnerabilities, including: 1 Multiple cross-site scripting vulnerabilities 2 A local file-include vulnerability 3 Multiple cross-site request-forgery vulnerabilities 4 Multiple information-disclosure vulnerabilities 5 A directory-traversal vuln ...

source: wwwsecurityfocuscom/bid/53306/info MySQLDumper is prone to multiple security vulnerabilities, including: 1 Multiple cross-site scripting vulnerabilities 2 A local file-include vulnerability 3 Multiple cross-site request-forgery vulnerabilities 4 Multiple information-disclosure vulnerabilities 5 A directory- ...

source: wwwsecurityfocuscom/bid/53306/info MySQLDumper is prone to multiple security vulnerabilities, including: 1 Multiple cross-site scripting vulnerabilities 2 A local file-include vulnerability 3 Multiple cross-site request-forgery vulnerabilities 4 Multiple information-disclosure vulnerabilities 5 A directory-traversal ...

source: wwwsecurityfocuscom/bid/53306/info MySQLDumper is prone to multiple security vulnerabilities, including: 1 Multiple cross-site scripting vulnerabilities 2 A local file-include vulnerability 3 Multiple cross-site request-forgery vulnerabilities 4 Multiple information-disclosure vulnerabilities 5 A directory-traversa ...

CWE-79 http://www.securityfocus.com/bid/53306 http://www.osvdb.org/81612 http://packetstormsecurity.org/files/112304/MySQLDumper-1.24.4-LFI-XSS-CSRF-Code-Execution-Traversal.html http://www.osvdb.org/81611 http://www.osvdb.org/81610 https://exchange.xforce.ibmcloud.com/vulnerabilities/75284 https://nvd.nist.gov https://www.exploit-db.com/exploits/37125/

CVE-2012-4251

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect