CVE-2012-4251

no score yetEPSS 1.9%

mysqldumper mysqldumper: no CVSS score yet. EPSS 1.9% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in MySQLDumper 1.24.4 allow remote attackers to inject arbitrary web script or HTML via the (1) page parameter to index.php, (2) phase parameter to install.php, (3) tablename or (4) dbid parameter to sql.php, or (5) filename parameter to restore.php in learn/cubemail/.

EPSS: 1.9% chance of exploitation in the next 30 days; higher than 79% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2012-08-13
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

mysqldumper:mysqldumper

References

http://packetstormsecurity.org/files/112304/MySQLDumper-1.24.4-LFI-XSS-CSRF-Code-Execution-Traversal.html
http://www.osvdb.org/81610
http://www.osvdb.org/81611
http://www.osvdb.org/81612
http://www.securityfocus.com/bid/53306

Check your stack JSON