Can arbitrary code run in a server if someone's know just the MySQL password?

Ned Batchelder ned at nedbatchelder.com
Wed Oct 2 09:58:17 EDT 2013


On 10/2/13 9:41 AM, Νίκος wrote:
> Στις 2/10/2013 4:25 μμ, ο/η Steven D'Aprano έγραψε:
>> On Wed, 02 Oct 2013 15:20:00 +0300, Νίκος wrote:
>>
>>> Is it possible for someone that knows the MYSQL password of a server to
>>> run arbitrary code on a linux server?
>>
>> Yes, it is possible.
>
> Is that what might have happened and someone managed to upload the 
> .html file in '~/home/nikos/www/' ?
>
> Can you think of any other way?
>

As others have said in this thread, this is not a Python topic. Find 
another forum for this question.  Do not ask it here again.

You've said that you can improve.  Show us by not asking non-Python 
questions here.

--Ned.



More information about the Python-list mailing list