CVE-2012-4253
NUCLEImysqldumper 1.24.4 - Path Traversal via Language Parameter
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2012-4253. PoCs published by AkaStep. A Nuclei detection template is also available.
AI-analyzed exploit summary The provided text describes multiple vulnerabilities in MySQLDumper 1.24.4, including directory traversal and local file inclusion, but does not contain executable exploit code. It outlines potential attack vectors and example URLs for exploitation.
Description
Multiple directory traversal vulnerabilities in MySQLDumper 1.24.4 allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) language parameter to learn/cubemail/install.php or (2) f parameter learn/cubemail/filemanagement.php, or execute arbitrary local files via a .. (dot dot) in the (3) config parameter to learn/cubemail/menu.php.
Exploits (2)
The provided text describes multiple vulnerabilities in MySQLDumper 1.24.4, including directory traversal and local file inclusion, but does not contain executable exploit code. It outlines potential attack vectors and example URLs for exploitation.
The provided text describes multiple vulnerabilities in MySQLDumper 1.24.4, including XSS, LFI, CSRF, info disclosure, and directory traversal. It includes a PoC URL for a directory traversal attack to retrieve /etc/passwd.