Can arbitrary code run in a server if someone's know just the MySQL password?

[Steven D'Aprano]

On Wed, 02 Oct 2013 15:20:00 +0300, Νίκος wrote:

> Is it possible for someone that knows the MYSQL password of a server to
> run arbitrary code on a linux server?

Yes, it is possible.

> Okey he uses the password and he gain access to the databases, then
> what? MySQL is a database server how can he run run arbitrary shell
> commands by using MySQL?
> 
> If yes, can you give an example please?

Google for "run arbitrary shell commands MySQL". If you don't understand 
them, go find a beginner's forum where you can learn about MySQL, this is 
not it.

https://duckduckgo.com/html/?q=run+arbitrary+shell+commands+MySQL
https://www.google.com.au/search?q=run+arbitrary+shell+commands


-- 
Steven