Directory traversal

Multiple directory traversal vulnerabilities in MySQLDumper 1.24.4 allow remote attackers to read arbitrary files via a .. dot dot in the 1 language parameter to learn/cubemail/install.php or 2 f parameter learn/cubemail/filemanagement.php, or execute arbitrary local files via a .. dot dot in the...

CVE-2012-4251

The CVE-2012-4251 entry corresponds to multiple XSS vulnerabilities in MySQLDumper 1.24.4. Reported affected vectors include index.php (page param), install.php (phase param), sql.php (tablename or dbid params), and restore.php (filename param) within learn/cubemail/. The connected sources confir...

PT-2012-5280

Name of the Vulnerable Software and Affected Versions MySQLDumper version 1.24.4 Description The issue allows remote attackers to hijack the authentication of administrators for various requests, including removing file access restrictions, dropping a database, uninstalling the application,...

CVE-2012-4254: Exposure of Sensitive Information to an Unauthorized Actor

MySQLDumper 1.24.4 allows remote attackers to obtain sensitive information Notices via a direct request to 1 learn/cubemail/restore.php or 2 learn/cubemail/dump.php...

CVE-2012-4252: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in MySQLDumper 1.24.4 allow remote attackers to hijack the authentication of administrators for requests that 1 remove file access restriction via a deletehtaccess action, 2 drop a database via a kill value in a db action, 3 uninstall the...

CVE-2012-4255: Exposure of Sensitive Information to an Unauthorized Actor

MySQLDumper 1.24.4 allows remote attackers to obtain sensitive information via a direct request to learn/cubemail/refreshdblist.php, which reveals the installation path in an error message...

PT-2012-5283

Name of the Vulnerable Software and Affected Versions MySQLDumper version 1.24.4 Description The issue allows remote attackers to obtain sensitive information via a direct request to "learn/cubemail/refresh dblist.php", which reveals the installation path in an error message. Recommendations For...

PT-2012-5282

Name of the Vulnerable Software and Affected Versions MySQLDumper version 1.24.4 Description The issue allows remote attackers to obtain sensitive information via a direct request to specific API endpoints, such as "learn/cubemail/restore.php" or "learn/cubemail/dump.php". Recommendations For...