CVE-2023-42387

An issue in TDSQL Chitu management platform v.10.3.19.5.0 allows a remote attacker to obtain sensitive information via get_db_info function in install.php.

• CWE-200

• https://github.com/ranhn/TDSQLExploit, Third Party Advisory
• https://github.com/ranhn/TDSQL.gitExploit, Third Party Advisory
• https://github.com/ranhn/TDSQLExploit, Third Party Advisory
• https://github.com/ranhn/TDSQL.gitExploit, Third Party Advisory

Published

Sep 18, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-42365A use-after-free vulnerability was discovered in BusyBox v.1…5.5
• CVE-2023-42366A heap-buffer-overflow was discovered in BusyBox v.1.36.1 in…5.5
• CVE-2023-4237A flaw was found in the Ansible Automation Platform. When cr…7.8
• CVE-2023-42371Cross Site Scripting vulnerability in Summernote Rich Text E…5.4
• CVE-2023-42374An issue in mystenlabs Sui Blockchain before v.1.6.3 allow a…9.8
• CVE-2023-4238The Prevent files / folders access WordPress plugin before 2…7.2
• CVE-2023-4239The Real Estate Manager plugin for WordPress is vulnerable t…6.5
• CVE-2023-42398An issue in zzCMS v.2023 allows a remote attacker to execute…9.8
• CVE-2023-42399Cross Site Scripting vulnerability in xdsoft.net Jodit Edito…6.1
• CVE-2023-42404OneVision Workspace before WS23.1 SR1 (build w31.040) allows…9.8
• CVE-2023-42405SQL injection vulnerability in FIT2CLOUD RackShift v1.7.1 al…9.8
• CVE-2023-42406SQL injection vulnerability in D-Link Online behavior audit …9.8