MySQLDumper 1.21b through 1.23 REV227 uses a \Limit GET\ statement in the .htaccess authentication mechanism which allows remote attackers to bypass authentication requirements via HTTP POST requests.