3 ms·
For shared hosting providers, or any configuration where mysql access control is actually used for anything, this appears fairly critical. Especially for the up
by 0x0 10y ago
For shared hosting providers, or any configuration where mysql access control is actually used for anything, this appears fairly critical. Especially for the upcoming PoC that doesn't need /etc/mysql/my.cnf to be writable.
It also means that an SQLi vulnerability suddenly becomes a potential remote root shell.
- Vendan 10y agoIf a shared hosting provider is giving you FILE permission, you should close your account and leave, cause they don't understand trivial basics of database security.