CVE-2012-4254

2012-08-1318:00:00

mitre

www.cve.org

6.2 Medium

AI Score

Confidence

Low

0.015 Low

EPSS

Percentile

87.1%

JSON

MySQLDumper 1.24.4 allows remote attackers to obtain sensitive information (Notices) via a direct request to (1) learn/cubemail/restore.php or (2) learn/cubemail/dump.php.

References

packetstormsecurity.org/files/112304/MySQLDumper-1.24.4-LFI-XSS-CSRF-Code-Execution-Traversal.html

www.osvdb.org/81616

www.securityfocus.com/bid/53306

exchange.xforce.ibmcloud.com/vulnerabilities/75287