Can arbitrary code run in a server if someone's know just the MySQL password?
Ned Batchelder
ned at nedbatchelder.com
Wed Oct 2 09:58:17 EDT 2013
On 10/2/13 9:41 AM, Νίκος wrote:
> Στις 2/10/2013 4:25 μμ, ο/η Steven D'Aprano έγραψε:
>> On Wed, 02 Oct 2013 15:20:00 +0300, Νίκος wrote:
>>
>>> Is it possible for someone that knows the MYSQL password of a server to
>>> run arbitrary code on a linux server?
>>
>> Yes, it is possible.
>
> Is that what might have happened and someone managed to upload the
> .html file in '~/home/nikos/www/' ?
>
> Can you think of any other way?
>
As others have said in this thread, this is not a Python topic. Find
another forum for this question. Do not ask it here again.
You've said that you can improve. Show us by not asking non-Python
questions here.
--Ned.
More information about the Python-list
mailing list