CVE-2023-52286 Information

Description

Tencent tdsqlpcloud through 1.8.5 allows unauthenticated remote attackers to discover database credentials via an index.php/api/install/get_db_info request a related issue to CVE-2023-42387.

Reference

https://github.com/Narrator21/tdsql/blob/main/20230927.md