Re: SECURITY HOLE in MySQL module in PHP

[Ralf Dreibrodt <ralf@dreibrodt.de>]

Hi,

brendan hack wrote:
> 
> I received an error saying 'test_database' not found.

of course you should change $db to you db-name.

> I then
> removed all access privileges from the anonymous user to the test
> database and received the following:
> 
> FAILED: USE test
> REASON: Access denied for user: '@localhost' to database 'test'

well, of course you need access to one php-script (to insert the command
in the exploits).
when you have this access, you can set $host to ANY mysql-server.
you do not have to have access to the mysql-server on localhost.

if you want to use the exploit and don´t have access to a mysql-server,
go to www.mysql.com and download it for linux, windows etc and use you
dialin-ip at $host.

bye
Ralf