Can arbitrary code run in a server if someone's know just the MySQL password?
Steven D'Aprano
steve+comp.lang.python at pearwood.info
Wed Oct 2 13:39:00 EDT 2013
On Wed, 02 Oct 2013 16:41:40 +0300, Νίκος wrote:
> Στις 2/10/2013 4:25 μμ, ο/η Steven D'Aprano έγραψε:
>> On Wed, 02 Oct 2013 15:20:00 +0300, Νίκος wrote:
>>
>>> Is it possible for someone that knows the MYSQL password of a server
>>> to run arbitrary code on a linux server?
>>
>> Yes, it is possible.
>
> Is that what might have happened and someone managed to upload the .html
> file in '~/home/nikos/www/' ?
How the hell should I know? I am not a MySQL expert, and this is not a
MySQL forum.
Nikos, you embarrass me. I have gone out on a limb for you, and this is
how you thank me? You said you were improving, and yet here you go
completely ignoring the links I sent you, and continuing to ask off-topic
questions here.
Thanks for kicking me in the guts. I will remember this next time you ask
a question.
--
Steven
More information about the Python-list
mailing list