Home >Backend Development >PHP Tutorial >WinMySQLadmin 1.1 stores Mysql password vulnerability in plain text - database related - PHP tutorial - Micro_PHP tutorial

WinMySQLadmin 1.1 stores Mysql password vulnerability in plain text - database related - PHP tutorial - Micro_PHP tutorial

WBOYWBOYWBOYWBOYWBOYWBOYWBOYWBOYWBOYWBOYWBOYWBOYWB
WBOYWBOYWBOYWBOYWBOYWBOYWBOYWBOYWBOYWBOYWBOYWBOYWBOriginal
2016-07-13 16:58:231032browse

WinMysqladmin 1.1 Stall mysql password vulnerabilities in bright text
Article Source:
Program:
WinMysqladmin

Details:
WinMysqladmin is a MySQL management software, and found that it stores mysql in bright text. The password is in the c:winntmy.ini file.
------
#This File was made using the WinMySQLadmin 1.1 Tool
[mysqld]
basedir=C:/mysql
datadir=C: /mysql/data
[WinMySQLadmin]
Server=C:/mysql/bin/mysqld-nt.exe
user=admin
password=XXXXX (in clear text)
QueryInterval=30
------
Exploiting this vulnerability, if a remote attacker can traverse the affected system, it is possible to obtain database administrator privileges. Such as:
http://packetstormsecurity.org/9905-exploits/ms.iis4.showcode.txt


www.bkjia.comtruehttp: //www.bkjia.com/PHPjc/631437.htmlTechArticleWinMySQLadmin 1.1 Store Mysql password vulnerability in plain text Source of article: Involved program: WinMySQLadmin Details: WinMySQLadmin is a Mysql management software , found it in clear text...
Statement:
The content of this article is voluntarily contributed by netizens, and the copyright belongs to the original author. This site does not assume corresponding legal responsibility. If you find any content suspected of plagiarism or infringement, please contact admin@php.cn