CVE-2023-42387

2023-09-1800:00:00

mitre

www.cve.org

tdsql

chitu

management platform

sensitive information

remote attacker

get_db_info function

AI Score

7.5

Confidence

High

EPSS

0.002

Percentile

55.2%

JSON

An issue in TDSQL Chitu management platform v.10.3.19.5.0 allows a remote attacker to obtain sensitive information via get_db_info function in install.php.

References

github.com/ranhn/TDSQL

github.com/ranhn/TDSQL.git