CVE-2007-3567 in MySQLDumper

Summary

MySQLDumper 1.21b through 1.23 REV227 uses a "Limit GET" statement in the .htaccess authentication mechanism, which allows remote attackers to bypass authentication requirements via HTTP POST requests.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Reservation: 07/05/2007
• Disclosure: 07/05/2007
• Moderation: VulDB entry created
• Entries: VDB-37641 (1)
• CPE: ready
• CWE: CWE-269 (Confirmed)
• CVSS: 7.3
• EPSS: 0.01093
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2007-3567
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2007-3567
• CVE Details: https://www.cvedetails.com/cve/CVE-2007-3567/