Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
4.3
CVSSv2

CVE-2012-4254

Published: 13/08/2012 Updated: 29/08/2017
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 435
Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N
Subscribe to Mysqldumper

Vulnerability Summary

MySQLDumper 1.24.4 allows remote malicious users to obtain sensitive information (Notices) via a direct request to (1) learn/cubemail/restore.php or (2) learn/cubemail/dump.php.

Vulnerable Product Search on Vulmon Subscribe to Product

mysqldumper mysqldumper 1.24.4

Exploits

Exploit DB: MySQLDumper 1.24.4 - Multiple Script Direct Request Information Disclosures
source: wwwsecurityfocuscom/bid/53306/info MySQLDumper is prone to multiple security vulnerabilities, including: 1 Multiple cross-site scripting vulnerabilities 2 A local file-include vulnerability 3 Multiple cross-site request-forgery vulnerabilities 4 Multiple information-disclosure vulnerabilities 5 A directory-trav ...

References

CWE-200http://packetstormsecurity.org/files/112304/MySQLDumper-1.24.4-LFI-XSS-CSRF-Code-Execution-Traversal.htmlhttp://www.securityfocus.com/bid/53306http://www.osvdb.org/81616https://exchange.xforce.ibmcloud.com/vulnerabilities/75287https://nvd.nist.govhttps://www.exploit-db.com/exploits/37130/
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-3581reflected XSSCVE-2024-26925CVE-2024-27956LFICVE-2024-3607CVE-2024-3107CVE-2024-3295SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook