MySQL Security

MySQL Security News, Articles, and Blogs

MySQL IF Query Handling Denial Of Service Zaafiyet

Published by | Filed under virus, msnciler-bu-virse-dikkat, ayyldz-tmden-son-dakika, xss-shell, h0tturk-com, 25-yanda, exploit, hmden-ernenin-lginc-loglar, bilgisayar-virs, really-simple-syndication

MySQL DoS aç??? Yap?lan Bildiride Yay?nland?. SecurityFocus.Com Bu Raporu Dogrulayarak Kay?tlad?. May 24 2007 07:21PM. MySQL IF Query Handling Remote Denial Of Service Vulnerability. Etkilenen SistemlerDen Baz?lar?. rPath rPath Linux 1 …
mysql linuxmysql linux
See the rest here: MySQL IF Query Handling Denial Of Service Zaafiyet
25 yanda ayyldz tmden son dakika bilgisayar virs […]

May 29th, 2007. Comment now »

Guide to Setting Up and Securing MySQL

Published by Admin | Filed under setting, guide, needing, password, definately, users, access, securing, mysql

While not actually needing MySQL in the end this guide is great for setting up your users and securing it. Definately do not leave the root MySQL user with no password, nor allow access from any host. …
Continued here: Guide to Setting Up and Securing MySQL
access definately guide mysql needing […]

May 26th, 2007. Comment now »

The Database Hacker’s Handbook Defending Database Servers

Published by Admin | Filed under defense, attack, exploitation, securing, postgresql, architecture, server, chapter, mysql

Chapter 20 - Securing MySQL Part VII - SQL Server Chapter 21 - Microsoft SQL Server Architecture Chapter 22 - SQL Server: Exploitation, Attack, and Defense Chapter 23 - Securing SQL Server Part VIII …
Read the rest here: The Database Hackerâ??s Handbook Defending Database Servers
architecture attack chapter defense exploitation […]

May 25th, 2007. Comment now »

What is an SQL Injection Attack?

Published by | Filed under mysql-hacking

Database security is a huge issue. Having your database compromised is about the worst thing that can happen to a web developer; especially if it contains sensitive user information (passwords, credit card numbers, e-mail addresses etc. …
ajax article ekini blog html javascript php securing securing php securing […]

May 23rd, 2007. Comment now »

Web Wiz Forums v.8.05 (MySQL version) SQL Injection Security …

Published by | Filed under injecting, exploited, confirmed, arbitrary, member, query, queries, version, search, manipulate

Input passed to the “name” parameter in “pop_up_member_search.asp” isn’t properly sanitised before being used in a SQL query. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code. Confirmed in version 1.1.4. …
Read the original: Web Wiz Forums v.8.05 (MySQL version) SQL Injection Security …
arbitrary confirmed exploited injecting […]

May 23rd, 2007. Comment now »

Clever Copy v.3.0 SQL Injection Security Vulnerability

Published by | Filed under credentials, suffix, issue, declared, database, exploitation, security, restrictions, access, mysql

The security issue is caused due to improper restrictions to “admin/connect.inc”, which contains the user credentials to access the MySQL database. Successful exploitation requires that “.inc” is not declared as a php suffix in …
Go here to read the rest: Clever Copy v.3.0 SQL Injection Security Vulnerability
access credentials database declared exploitation […]

May 16th, 2007. Comment now »