Can arbitrary code run in a server if someone's know just the MySQL password?
feedthetroll at gmx.de
feedthetroll at gmx.de
Wed Oct 2 08:38:40 EDT 2013
Am Mittwoch, 2. Oktober 2013 14:20:00 UTC+2 schrieb Ferrous Cranus:
> ...
> Is it possible for someone that knows the MYSQL password of a server to
> run arbitrary code on a linux server?
> ...
> If yes, can you give an example please?
http://lmgtfy.com/?q=mysql+shell+escape
> Please, serious replies only, i won't answer to ironic comments or jokes.
Please only questions about python. This not a mysql or security list.
PLONK!
(Hey Thunderbird has a very useful new feature. Ignore thread.)
More information about the Python-list
mailing list