CVE-2012-4255: Exposure of Sensitive Information to an Unauthorized Actor

MySQLDumper 1.24.4 allows remote attackers to obtain sensitive information via a direct request to learn/cubemail/refreshdblist.php, which reveals the installation path in an error message...