3 ms·

I thought it was no password, but only available via localhost?

• TheRealPomax 9y ago
  All that requires to be exploited "on" localhost is some PHP script interpreting unsanitized user uploads (uploading a php script that has an image file extension's a pretty famous example) on any of a thousand customer sites. You don't want that MySQL user to exist, ever =/