Description
MySQLDumper 1.24.4 allows remote attackers to obtain sensitive information (Notices) via a direct request to (1) learn/cubemail/restore.php or (2) learn/cubemail/dump.php.
Exploits (1)
References (4)
Core 4
Core References
Exploit x_refsource_misc
http://packetstormsecurity.org/files/112304/MySQLDumper-1.24.4-LFI-XSS-CSRF-Code-Execution-Traversal.html
Exploit vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/53306
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/75287
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://www.osvdb.org/81616
Scores
EPSS
0.0697
EPSS Percentile
91.5%
Details
CWE
CWE-200
Status
published
Products (1)
mysqldumper/mysqldumper
1.24.4
Published
Aug 13, 2012
Tracked Since
Feb 18, 2026