security vulnerability

2002-10-01 Thread kmv
Description: Any user in mysql can create as many databases as he wants. Create a user with 1 database, and let him create database with name my_data_base. Log into mysql console as user and run command: CREATE DATABASE my?data?base; New database will be created and user can create

Re: Security vulnerability

2002-10-01 Thread Sergei Golubchik
Hi! On Oct 01, Plesk Support wrote: Any user in mysql can create as many databases as he wants. Create a user with 1 database, and let him create database with name my_data_base. Log into mysql console as user and run command: CREATE DATABASE my?data?base; New database will be