MySQL DB is hackable?

One form of invasion, but it is not related to MYSQL, but with its code is the invasion by SQL INJECTION.
Review your code. Read about SQL Injection and see if this is the problem.