Can arbitrary code run in a server if someone's know just the MySQL password?

feedthetroll at gmx.de feedthetroll at gmx.de
Wed Oct 2 08:38:40 EDT 2013


Am Mittwoch, 2. Oktober 2013 14:20:00 UTC+2 schrieb Ferrous Cranus:
> ...
> Is it possible for someone that knows the MYSQL password of a server to 
> run arbitrary code on a linux server?
> ...
> If yes, can you give an example please?
http://lmgtfy.com/?q=mysql+shell+escape

> Please, serious replies only, i won't answer to ironic comments or jokes.
Please only questions about python. This not a mysql or security list.

PLONK!

(Hey Thunderbird has a very useful new feature. Ignore thread.)



More information about the Python-list mailing list