MySQL Show Variables Enumeration Scanner

MySQL is a leading open-source relational database management system widely adopted by developers, system administrators, and enterprises for managing structured data. It powers everything from small websites to large-scale applications, offering robust performance and reliability. MySQL is often deployed on Linux servers, cloud instances, and containerized environments, making it a critical component in modern IT infrastructure.

The vulnerability involves the MySQL SHOW VARIABLES command, which can be exploited to enumerate system variables. This arises when the MySQL server is configured with weak access controls, allowing unauthenticated or low-privileged users to execute this command. The feature is intended for administrative diagnostics but becomes a security risk when exposed to unauthorized parties.

Technically, the scanner sends a SHOW VARIABLES query to the MySQL server on the default port 3306 or a custom port. If the server responds with a list of variables, it confirms that enumeration is possible. This includes sensitive data such as datadir, basedir, version, and plugin_dir, which can aid in further attacks like path traversal or privilege escalation.

If exploited, an attacker can gather critical configuration details, potentially leading to data breaches, unauthorized access, or system compromise. The exposure of system paths and version information can facilitate targeted attacks, making this a high-severity issue with a CVSS score of 8.0.