Directory traversal

Multiple directory traversal vulnerabilities in MySQLDumper 1.24.4 allow remote attackers to read arbitrary files via a .. dot dot in the 1 language parameter to learn/cubemail/install.php or 2 f parameter learn/cubemail/filemanagement.php, or execute arbitrary local files via a .. dot dot in the...

PT-2012-5280

Name of the Vulnerable Software and Affected Versions MySQLDumper version 1.24.4 Description The issue allows remote attackers to hijack the authentication of administrators for various requests, including removing file access restrictions, dropping a database, uninstalling the application,...