Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
MySQLDumper 1.21b through 1.23 REV227 uses a "Limit GET" statement in the .htaccess authentication mechanism, which allows remote attackers to bypass authentication requirements via HTTP POST requests.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
MySQLDumper绕过Apache访问控制认证漏洞
Vulnerability Description
MySQLDumper是用PHP和Perl编写的MySQL数据库备份脚本。 MySQLDumper对脚本本身的访问控制实现上存在漏洞，远程攻击者可能利用此漏洞非授权访问到脚本功能。 在所生成的.htaccess文件中使用了Apache指令LIMIT，但LIMIT指令中的参数无法充分地保护文件夹： <Limit GET> 口令保护仅对HTTP GET请求有效，而对HTTP POST之类的请求无效，因此如果用户使用POST请求受保护MySQLDumper文件夹中的文件的话，就不会要求输入用户名和口令，导致.h
CVSS Information
N/A
Vulnerability Type
N/A