CVE-2023-42387
Description
An issue in TDSQL Chitu management platform v.10.3.19.5.0 allows a remote attacker to obtain sensitive information via get_db_info function in install.php.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- TDSQL Chitu management platform/TDSQL Chitu management platformdescription
- Range: =10.3.19.5.0
Patches
Vulnerability mechanics
Root cause
"The `get_db_info` function in `install.php` does not perform authorization checks, allowing unauthenticated access to sensitive database credentials."
Attack vector
An attacker can send a request to the `/tdsqlpcloud/index.php/api/install/get_db_info` endpoint. This endpoint is part of the TDSQL Chitu management platform and is accessible remotely. Upon receiving the request, the `get_db_info` function executes without any authentication, directly returning the database hostname, port, username, and password in plain text [ref_id=1]. This information can then be used by the attacker to log into the database.
Affected code
The vulnerability resides in the `get_db_info` function within the `install.php` file of the TDSQL Chitu management platform. The advisory indicates that the `__construct` method of the `Install` class and the `get_db_info` function itself are the relevant code sections [ref_id=1].
What the fix does
The advisory suggests modifying the `__construct` method of the `Install` class by changing `parent::__construct(false)` to `parent::__construct(true)`. Additionally, the `get_db_info` function's visibility should be changed from `public` to `protect`. These changes likely enforce authentication and restrict access to the `get_db_info` function, preventing unauthorized disclosure of database credentials [ref_id=1].
Preconditions
- networkThe TDSQL Chitu management platform must be accessible over the network.
- authNo authentication is required to access the vulnerable endpoint.
Reproduction
1. Access the endpoint `http://tdsql-xxxxxxx.com/tdsqlpcloud/index.php/api/install/get_db_info`. 2. Obtain the plaintext database account password. 3. Log in to the database using the obtained credentials [ref_id=1].
Generated on Jun 6, 2026. Inputs: CWE entries + fix-commit diffs from this CVE's patches. Citations validated against bundle.
News mentions
0No linked articles in our index yet.