Can arbitrary code run in a server if someone's know just the MySQL password?

Νίκος nikos.gr33k at gmail.com
Wed Oct 2 09:41:40 EDT 2013


Στις 2/10/2013 4:25 μμ, ο/η Steven D'Aprano έγραψε:
> On Wed, 02 Oct 2013 15:20:00 +0300, Νίκος wrote:
>
>> Is it possible for someone that knows the MYSQL password of a server to
>> run arbitrary code on a linux server?
>
> Yes, it is possible.

Is that what might have happened and someone managed to upload the .html 
file in '~/home/nikos/www/' ?

Can you think of any other way?




More information about the Python-list mailing list