LeakedIn Logo
Stories About Data Leaks and Related Stuff

Potential leak of data: MySQL Access Control

0 votedvote

Detected 2 occurrence(s) of ‘create user .* identified by’:

une-18-2012',4);

DELETE FROM Student WHERE nr_albumu = 1; // Blad posiada ocene.
DELETE FROM Student WHERE nr_albumu = 2; // Usunięto.

4)
CREATE USER asystent IDENTIFIED BY 'asystent' PASSWORD 'asys99';
GRANT SELECT ON Student TO asystent;

5)
CREATE USER kierownik IDENTIFIED BY 'kierownik' PASSWORD '9kier9';
GRANT UPDATE ON ALL TO kierownik;
GRANT INSERT ON ALL TO kierownik;

6)
CREATE VIEW najlepsi_studenci(nr_albumu,nazwisko,przedmiot) 
AS SELECT S.nr_albumu,S.nazwisko,O.przedmiot  
FROM Stedent S,Oceny O
WHERE S.nr_al

Source: http://pastebin.com/raw.php?i=mL4kgVCz

Tags: ,

Comments are closed.