mysqldumper kayıtları
mysqldumper üreticisine ait 8 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 2
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor2
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-352 Cross-Site Request Forgery (CSRF)1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
8 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
31İzleyin | CVE-2007-3567İstismar yok | MySQLDumper 1.21b through 1.23 REV227 uses a "Limit GET" statement in the .htaccess authentication mechanism, which allows remote attackers mysqldumper · mysqldumper | Yüksek7,5 | — | %2,8 | 5 Tem 2007 |
27İzleyin | CVE-2006-5264İstismar yok | Cross-site scripting (XSS) vulnerability in sql.php in MysqlDumper 1.21 b6 allows remote attackers to inject arbitrary web script or HTML vimysqldumper · mysqldumper | Orta6,8 | — | %1,2 | 12 Eki 2006 |
24İzleyin | CVE-2017-1000012İstismar yok | MySQL Dumper version 1.24 is vulnerable to stored XSS when displaying the data in the database to the usermysqldumper · mysqldumper · CWE-79 | Orta6,1 | — | %0,7 | 17 Tem 2017 |
20İzleyin | CVE-2012-4253Kavram kanıtı | Multiple directory traversal vulnerabilities in MySQLDumper 1.24.4 allow remote attackers to read arbitrary files via a ..mysqldumper · mysqldumper · CWE-22 | Orta4,3 | — | %8,4 | 13 Ağu 2012 |
20İzleyin | CVE-2012-4252Kavram kanıtı | Multiple cross-site request forgery (CSRF) vulnerabilities in MySQLDumper 1.24.4 allow remote attackers to hijack the authentication of admimysqldumper · mysqldumper · CWE-352 | Orta5,1 | — | %1,1 | 13 Ağu 2012 |
18İzleyin | CVE-2012-4254Kavram kanıtı | MySQLDumper 1.24.4 allows remote attackers to obtain sensitive information (Notices) via a direct request to (1) learn/cubemail/restore.php mysqldumper · mysqldumper · CWE-200 | Orta4,3 | — | %2,4 | 13 Ağu 2012 |
18İzleyin | CVE-2012-4251Kavram kanıtı | Multiple cross-site scripting (XSS) vulnerabilities in MySQLDumper 1.24.4 allow remote attackers to inject arbitrary web script or HTML via mysqldumper · mysqldumper · CWE-79 | Orta4,3 | — | %1,8 | 13 Ağu 2012 |
17İzleyin | CVE-2012-4255İstismar yok | MySQLDumper 1.24.4 allows remote attackers to obtain sensitive information via a direct request to learn/cubemail/refresh_dblist.php, which mysqldumper · mysqldumper · CWE-200 | Orta4,3 | — | %1,3 | 13 Ağu 2012 |
- CVE-2007-356731İzleyin
MySQLDumper 1.21b through 1.23 REV227 uses a "Limit GET" statement in the .htaccess authentication mechanism, which allows remote attackers
YüksekCVSS 7,5İstismar yokEPSS %2mysqldumper · mysqldumper5 Tem 2007
- CVE-2006-526427İzleyin
Cross-site scripting (XSS) vulnerability in sql.php in MysqlDumper 1.21 b6 allows remote attackers to inject arbitrary web script or HTML vi
OrtaCVSS 6,8İstismar yokEPSS %1mysqldumper · mysqldumper12 Eki 2006
- CVE-2017-100001224İzleyin
MySQL Dumper version 1.24 is vulnerable to stored XSS when displaying the data in the database to the user
OrtaCVSS 6,1İstismar yokEPSS %0mysqldumper · mysqldumper17 Tem 2017
- CVE-2012-425320İzleyin
Multiple directory traversal vulnerabilities in MySQLDumper 1.24.4 allow remote attackers to read arbitrary files via a ..
OrtaCVSS 4,3Kavram kanıtıEPSS %8mysqldumper · mysqldumper13 Ağu 2012
- CVE-2012-425220İzleyin
Multiple cross-site request forgery (CSRF) vulnerabilities in MySQLDumper 1.24.4 allow remote attackers to hijack the authentication of admi
OrtaCVSS 5,1Kavram kanıtıEPSS %1mysqldumper · mysqldumper13 Ağu 2012
- CVE-2012-425418İzleyin
MySQLDumper 1.24.4 allows remote attackers to obtain sensitive information (Notices) via a direct request to (1) learn/cubemail/restore.php
OrtaCVSS 4,3Kavram kanıtıEPSS %2mysqldumper · mysqldumper13 Ağu 2012
- CVE-2012-425118İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in MySQLDumper 1.24.4 allow remote attackers to inject arbitrary web script or HTML via
OrtaCVSS 4,3Kavram kanıtıEPSS %1mysqldumper · mysqldumper13 Ağu 2012
- CVE-2012-425517İzleyin
MySQLDumper 1.24.4 allows remote attackers to obtain sensitive information via a direct request to learn/cubemail/refresh_dblist.php, which
OrtaCVSS 4,3İstismar yokEPSS %1mysqldumper · mysqldumper13 Ağu 2012