WinMySQLadmin 1.1 以明文形式存放 Mysql 密码漏洞-数据库相关-PHP教程-微
- WBOYOriginal
- 2016-06-13 10:02:49874browse
WinMySQLadmin 1.1 以明文形式存放 Mysql 密码漏洞
文章来源：
涉及程序：
WinMySQLadmin
详细：
WinMySQLadmin 是一个 Mysql 管理软件，发现它以明文形式存放 Mysql 密码于 c:winntmy.ini 文件中。
---
#This File was made using the WinMySQLadmin 1.1 Tool
[mysqld]
basedir=C:/mysql
datadir=C:/mysql/data
[WinMySQLadmin]
Server=C:/mysql/bin/mysqld-nt.exe
user=admin
password=XXXXX (in clear text)
QueryInterval=30
---
利用此漏洞，如果远程攻击者能遍历受影响系统，将可能取得数据库管理员权限。如：
http://packetstormsecurity.org/9905-exploits/ms.iis4.showcode.txt
Statement：
The content of this article is voluntarily contributed by netizens, and the copyright belongs to the original author. This site does not assume corresponding legal responsibility. If you find any content suspected of plagiarism or infringement, please contact admin@php.cn
Previous article：Tutorial for migrating data from MS Access to MySQNext article：用正则,从指定起始位置,在源字符串之中截取定长字符串