On Wed, 02 Oct 2013 15:20:00 +0300, Νίκος wrote: > Is it possible for someone that knows the MYSQL password of a server to > run arbitrary code on a linux server?
Yes, it is possible. > Okey he uses the password and he gain access to the databases, then > what? MySQL is a database server how can he run run arbitrary shell > commands by using MySQL? > > If yes, can you give an example please? Google for "run arbitrary shell commands MySQL". If you don't understand them, go find a beginner's forum where you can learn about MySQL, this is not it. https://duckduckgo.com/html/?q=run+arbitrary+shell+commands+MySQL https://www.google.com.au/search?q=run+arbitrary+shell+commands -- Steven -- https://mail.python.org/mailman/listinfo/python-list
