MySQL
A widely used open-source relational database.
Where It Sits
The small stack marks its layer. Beside it, each related technology links to its own page.
- App
- Framework
- Web Server
- Runtime
- Containers
- OS
- Hypervisor
- Firmware
- Hardware
- DataMySQL
About
MySQL is a widely used open-source relational database. It is the M in LAMP, the Linux, Apache, MySQL and PHP stack behind many WordPress sites. It listens on port 3306 and usually runs on Linux. Its data is the prize in many web application attacks.
How to Spot It
These are signs that a system runs MySQL, seen from outside without signing in, such as a response header, a cookie, a path or a default port. They help you find where it runs across your own estate. A version shown to the world also tells anyone scanning which flaws might apply, so it is worth hiding.
- Default port
3306 (MySQL)- Service banner
8.0.36 in the connection handshake
If It Has a Flaw
The database holds the application's data, so a flaw or weak credential here exposes the records directly. SQL injection in the application above is the more common route in.
Rivals
Rivals do the same job on the same layer, so a system usually runs one of them in any one place. A flaw in a rival does not reach MySQL.
Stacks and Code
MySQL is part of the common stacks below, and each stack's page shows who runs every layer. Its code arrives from the sources listed, and each source's page says how bad code could get in through it.
- Its Code Comes From
- OS Packages