CVE-2023-52286

Tencent tdsqlpcloud through 1.8.5 allows unauthenticated remote attackers to discover database credentials via an index.php/api/install/getdbinfo request, a related issue to CVE-2023-42387...

CVE-2023-52286

creationtimestamp| type| source ---|---|--- 2023-12-31 08:26:28+00:00| seen| https://t.me/ctinow/161006 2024-01-01 01:31:05+00:00| seen| https://t.me/cibsecurity/74056 2024-01-06 01:16:17+00:00| seen| https://t.me/ctinow/163790 2024-01-22 10:11:19+00:00| seen| https://t.me/ctinow/171064...

CVE-2023-52286

CVE-2023-52286 affects Tencent tdsqlpcloud up to version 1.8.5, where an unauthenticated remote attacker can read database credentials via index.php/api/install/get_db_info. The issue is linked to CVE-2023-42387 (TDSQL Chitu). CVSS 3.1 base score 7.5 (CONF: HIGH) with Network access, no user inte...