From: Jon Hart (jhart@spoofed.org)
Date: Thu Aug 17 2006 - 13:54:54 EDT
On Thu, Aug 17, 2006 at 05:41:06PM +0400, DokFLeed wrote:
> I am testing a web application, I can run UPDATE & SELECT
> Does anyone know a way to upload a file to a server through MySQL !
> does it allow running system commands or a way to dump a file from the
> database to the server?
> its LAMP , Linux, Apache, MySQL, PHP
> any ideas!!
use 'into outfile'. You'll be limited by DB and filesystem permissions,
though.
select 'foobar' into outfile '/tmp/blahfoo';
-jon
------------------------------------------------------------------------
This List Sponsored by: Cenzic
Need to secure your web apps?
Cenzic Hailstorm finds vulnerabilities fast.
Click the link to buy it, try it or download Hailstorm for FREE.
http://www.cenzic.com/products_services/download_hailstorm.php
------------------------------------------------------------------------
This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:56:45 EDT