CVE-2012-4253

Multiple directory traversal vulnerabilities in MySQLDumper 1.24.4 allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) language parameter to learn/cubemail/install.php or (2) f parameter learn/cubemail/filemanagement.php, or execute arbitrary local files via a .. (dot dot) in the (3) config parameter to learn/cubemail/menu.php.

• CWE-22

• http://packetstormsecurity.org/files/112304/MySQLDumper-1.24.4-LFI-XSS-CSRF-Code-Execution-Traversal.htmlExploit
• http://www.osvdb.org/81609
• http://www.osvdb.org/81615
• http://www.securityfocus.com/bid/53306Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/75283
• https://exchange.xforce.ibmcloud.com/vulnerabilities/75286
• http://packetstormsecurity.org/files/112304/MySQLDumper-1.24.4-LFI-XSS-CSRF-Code-Execution-Traversal.htmlExploit
• http://www.osvdb.org/81609
• http://www.osvdb.org/81615
• http://www.securityfocus.com/bid/53306Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/75283
• https://exchange.xforce.ibmcloud.com/vulnerabilities/75286

Published

Aug 13, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-4247Multiple cross-site scripting (XSS) vulnerabilities in lists…
• CVE-2012-4248The Amazon Kindle Touch before 5.1.2 does not properly restr…
• CVE-2012-4249The Amazon Lab126 com.lab126.system sendEvent implementation…
• CVE-2012-4250Stack-based buffer overflow in the RequestScreenOptimization…
• CVE-2012-4251Multiple cross-site scripting (XSS) vulnerabilities in MySQL…
• CVE-2012-4252Multiple cross-site request forgery (CSRF) vulnerabilities i…
• CVE-2012-4254MySQLDumper 1.24.4 allows remote attackers to obtain sensiti…
• CVE-2012-4255MySQLDumper 1.24.4 allows remote attackers to obtain sensiti…
• CVE-2012-4256The jNews (com_jnews) component 7.5.1 for Joomla! allows rem…
• CVE-2012-4257Yaqas (Yet Another Question & Answer System) 1.0 Alpha 1 all…
• CVE-2012-4258Multiple SQL injection vulnerabilities in MYRE Real Estate S…
• CVE-2012-4259Cross-site scripting (XSS) vulnerability in the contacts in …