medium4.3
CVE-2012-4255
MySQLDumper 1.24.4 allows remote attackers to obtain sensitive information via a direct request to learn/cubemail/refresh_dblist.php, which reveals the install…
Impact
MySQLDumper 1.24.4 allows remote attackers to obtain sensitive information via a direct request to learn/cubemail/refresh_dblist.php, which reveals the installation path in an error message.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mysqldumper | Mysqldumper | Version 1.24.4 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.org/files/112304/MySQLDumper-1.24.4-LFI-XSS-CSRF-Code-Execution-Traversal.html
- http://www.osvdb.org/81616
- http://www.securityfocus.com/bid/53306
- http://packetstormsecurity.org/files/112304/MySQLDumper-1.24.4-LFI-XSS-CSRF-Code-Execution-Traversal.html
- http://www.osvdb.org/81616
- http://www.securityfocus.com/bid/53306