Skip to content

Instantly share code, notes, and snippets.

@brianwebb01

brianwebb01/CVE-2016-6662.sql

Created September 29, 2016 16:24
Show Gist options
  • Save brianwebb01/a70a9193a742f37b48a72a637b34c385 to your computer and use it in GitHub Desktop.
Save brianwebb01/a70a9193a742f37b48a72a637b34c385 to your computer and use it in GitHub Desktop.
Download ZIP
MySQL CVE-2016-6662. Remove SUPER and FILE privileges from users that are in the results of the following query.
Raw
CVE-2016-6662.sql
SELECT user, host FROM mysql.user WHERE Super_priv='Y' AND File_priv='Y' AND host NOT IN ('localhost','127.0.0.1', '::1');
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment