Can arbitrary code run in a server if someone's know just the MySQL password?
Steven D'Aprano
steve+comp.lang.python at pearwood.info
Wed Oct 2 09:25:58 EDT 2013
On Wed, 02 Oct 2013 15:20:00 +0300, Νίκος wrote:
> Is it possible for someone that knows the MYSQL password of a server to
> run arbitrary code on a linux server?
Yes, it is possible.
> Okey he uses the password and he gain access to the databases, then
> what? MySQL is a database server how can he run run arbitrary shell
> commands by using MySQL?
>
> If yes, can you give an example please?
Google for "run arbitrary shell commands MySQL". If you don't understand
them, go find a beginner's forum where you can learn about MySQL, this is
not it.
https://duckduckgo.com/html/?q=run+arbitrary+shell+commands+MySQL
https://www.google.com.au/search?q=run+arbitrary+shell+commands
--
Steven
More information about the Python-list
mailing list