# Vulnerability Discovery

> Default creds, FILE privilege, remote access, and weak hash checks

- **URL:** https://hackindex.io/services/mysql/vulnerability-discovery
- **Service:** [MySQL](https://hackindex.io/services/mysql.md)
- **Tags:** vulns, misconfig, risk
- **Published:** 2026-03-26
- **Updated:** 2026-03-29

MySQL vulnerability discovery checks for weak credentials, dangerous privileges, and outdated versions. Passwordless root access, anonymous accounts, and default test databases are common findings on poorly configured instances.

The FILE privilege allows reading and writing arbitrary files on the server. LOAD DATA LOCAL INFILE can be abused to read client-side files. Outdated MySQL versions carry known CVEs for authentication bypass and privilege escalation that scanners catch reliably.

## Guides

- [MySQL Anonymous and Default Credential Check](https://hackindex.io/services/mysql/vulnerability-discovery/mysql-anonymous-and-default-credential-check.md)
- [MySQL FILE Privilege Detection](https://hackindex.io/services/mysql/vulnerability-discovery/mysql-file-privilege-detection.md)
- [MySQL Remote Access Misconfiguration](https://hackindex.io/services/mysql/vulnerability-discovery/mysql-remote-access-misconfiguration.md)
- [MySQL Weak Password Hash Detection](https://hackindex.io/services/mysql/vulnerability-discovery/mysql-weak-password-hash-detection.md)