MySQLDumper 1.24.4 - Directory Traversal

Multiple directory traversal vulnerabilities in MySQLDumper 1.24.4 allow remote attackers to read arbitrary files via a .. dot dot in the 1 language parameter to learn/cubemail/install.php or 2 f parameter learn/cubemail/filemanagement.php, or execute arbitrary local files via a .. dot dot in the...

EUVD-2007-3551

Malware in sbrugna...

EUVD-2012-4196

Malware in sbrugna...

EUVD-2012-4199

Malware in sbrugna...

EUVD-2006-5249

Malware in sbrugna...

EUVD-2012-4198

Malware in sbrugna...

EUVD-2012-4195

Malware in sbrugna...

CVE-2012-4255

MySQLDumper 1.24.4 allows remote attackers to obtain sensitive information via a direct request to learn/cubemail/refreshdblist.php, which reveals the installation path in an error message...

MySQLDumper Version Detection

This script detects the installed version of MySQLDumper. SPDX-FileCopyrightText: 2016 SCHUTZWERK GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

shopex csrf脱裤 任意文件删除 文件写shell

简要描述： shopex csrf脱裤 任意文件删除 文件写shell 详细说明： 所有的漏洞缘由都是因为一个csrf引起的，那么我们来一个个看看： 安装最新版本的shopex： ctl.backup.php: function backup ifconstant'SAASMODE' exit; header"Content-type:text/html;charset=utf-8"; $params'sizelimit' = 1024; $params'filename' = $GET"filename"==""?date"YmdHis", time:$GET"filename";...

MySQLDumper 1.21 SQL.PHP Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/20460/info MySQLDumper is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue could allow an attacker to execute attacker-supplied script code ...

MySQLDumper <= 1.24.4 SQLi Vulnerability - Active Check

MySQLDumper is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2012-4252

Multiple cross-site request forgery CSRF vulnerabilities in MySQLDumper 1.24.4 allow remote attackers to hijack the authentication of administrators for requests that 1 remove file access restriction via a deletehtaccess action, 2 drop a database via a kill value in a db action, 3 uninstall the...

CVE-2012-4255

MySQLDumper 1.24.4 allows remote attackers to obtain sensitive information via a direct request to learn/cubemail/refreshdblist.php, which reveals the installation path in an error message...

CVE-2012-4251

Multiple cross-site scripting XSS vulnerabilities in MySQLDumper 1.24.4 allow remote attackers to inject arbitrary web script or HTML via the 1 page parameter to index.php, 2 phase parameter to install.php, 3 tablename or 4 dbid parameter to sql.php, or 5 filename parameter to restore.php in...

CVE-2012-4253

Multiple directory traversal vulnerabilities in MySQLDumper 1.24.4 allow remote attackers to read arbitrary files via a .. dot dot in the 1 language parameter to learn/cubemail/install.php or 2 f parameter learn/cubemail/filemanagement.php, or execute arbitrary local files via a .. dot dot in the...

CVE-2012-4254

MySQLDumper 1.24.4 allows remote attackers to obtain sensitive information Notices via a direct request to 1 learn/cubemail/restore.php or 2 learn/cubemail/dump.php...

Information disclosure

MySQLDumper 1.24.4 allows remote attackers to obtain sensitive information via a direct request to learn/cubemail/refreshdblist.php, which reveals the installation path in an error message...

Directory traversal

Multiple directory traversal vulnerabilities in MySQLDumper 1.24.4 allow remote attackers to read arbitrary files via a .. dot dot in the 1 language parameter to learn/cubemail/install.php or 2 f parameter learn/cubemail/filemanagement.php, or execute arbitrary local files via a .. dot dot in the...

Design/Logic Flaw

MySQLDumper 1.24.4 allows remote attackers to obtain sensitive information Notices via a direct request to 1 learn/cubemail/restore.php or 2 learn/cubemail/dump.php...