CVE-2012-4252

CVE-2012-4252 describes multiple Cross-Site Request Forgery (CSRF) vulnerabilities in MySQLDumper version 1.24.4. These flaws allow remote attackers to hijack an administrator's authenticated session to perform various malicious actions, including deleting .htaccess files, dropping databases, uninstalling the application, deleting configuration files, changing passwords, or executing arbitrary SQL commands. The vulnerability has a CVSS score of 5.1, indicating a medium severity with a network attack vector and high attack complexity, potentially leading to partial compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation or Metasploit/Nuclei modules, exploit code is publicly available via ExploitDB (EDB-37131), though community discussion and media coverage are minimal.