71 matches found
CVE-2007-3567
CVE-2007-3567 affects MySQLDumper 1.21b through 1.23 REV227. The vulnerability stems from a flawed “Limit GET” statement in the .htaccess authentication mechanism, allowing remote attackers to bypass authentication via HTTP POST requests. Impact is partial confidentiality and integrity and partia...
MySQLDumper Apache访问控制验证绕过漏洞
MySQLDumper是一款备份MySQL数据库的备份脚本。 在Apache访问控制文件中存在配置错误，远程攻击者可以利用漏洞绕过验证删除Apache的访问控制文件，获得对保护文件的访问。 由于MySQLDumper包含的main.php对用户提交的 HTTP POST请求缺少验证，攻击者可以利用漏洞删除.htaccess/.htpasswd文件，访问受保护的文件信息。 MySQLDumper MySQLDumper Typo3-Extension 0.0.5 MySQLDumper MySQLDumper 1.23prereleaseREV MySQLDumper MySQLDumpe...
MySQLDumper vulnerability: Bypassing Apache based access control possible
A critical security issue has been found in the Open Source PHP backup tool MySQLDumper 0. The issue allows to bypass an Apache based access control created with MySQLDumper. Through this an attacker can easily gain full control about all features of MySQLDumper. The authors of MySQLDumper were...
Multiple vulnerabilities in all variants of MySQLDumper
Multiple vulnerabilities have been found in the third party extension "mysqldumper". Full read/write access to the connected database and other related issues. Component Type: Third party extension. This extension is not part of the TYPO3 default installation Affected Versions: a TYPO3 extension...
MysqlDumper-1.21.txt
MysqlDumper Version 1.21 b6 Xss Vulnerability By CrackersChild [email protected] www.sibersavacilar.com Download Script http://www.mysqldumper.de/board/downloads.php?view=detail&id=17 Exploit www.site.com/mysqldumperpath/sql.php?db=Xss codes Examples...
CVE-2006-5264
Cross-site scripting XSS vulnerability in sql.php in MysqlDumper 1.21 b6 allows remote attackers to inject arbitrary web script or HTML via the db parameter...
CVE-2006-5264
Cross-site scripting XSS vulnerability in sql.php in MysqlDumper 1.21 b6 allows remote attackers to inject arbitrary web script or HTML via the db parameter...
CVE-2006-5264
CVE-2006-5264 is a documented XSS in MysqlDumper 1.21 b6, exploitable via sql.php (parameter: db). Affected component: sql.php; vulnerability type: cross-site scripting. Impact per provided data: partial confidentiality, integrity, and availability. CVSS v2 base score 6.8 (MEDIUM). No remediation...
MysqlDumper Version 1.21 b6 Xss Vulnerability
MysqlDumper Version 1.21 b6 Xss Vulnerability By CrackersChild [email protected] www.sibersavacilar.com Download Script http://www.mysqldumper.de/board/downloads.php?view=detail&id=17 Exploit www.site.com/mysqldumperpath/sql.php?db=Xss codes Examples...
MySQLDumper 1.21 - 'sql.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/20460/info MySQLDumper is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue could allow an attacker to execute attacker-supplied script code in the browser of an unsuspecting...
MySQLDumper 1.21 - sql.php Cross-Site Scripting
MySQLDumper 1.21 - sql.php Cross-Site Scripting source: https://www.securityfocus.com/bid/20460/info MySQLDumper is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue could allow an attacker to execute attacker-supplie...