A server in weimeng is improperly configured, leading to full-site data leakage

A server in weimeng is improperly configured, leading to full-site data leakage

Any user can log on with any password. This is the first time you see this wonderful configuration! (See figure 1. User overview)

Ip: 114.215.169.84

Defect service: mysql
 

Mysql-uroot-pwooyun-h 114.215.169.84

See the following. Is it your house? If not, I believe you will handle it, right?

Only inform the server that there is a problem and no data is exported. Hope to fix it in time!

 

 

 

 

 

 

Solution:

1. prohibit external ip addresses from accessing the database

2. effectively control mysql account Permissions