Typecho V1.1 Remote Command Execution via SSRF

Typecho V1.1 Remote Command Execution via SSRF

CVE-2018-18753 · HIGH Severity

AV:N/AC:L/AU:N/C:C/I:C/A:C

Typecho V1.1 allows remote attackers to send shell commands via base64-encoded serialized data, as demonstrated by SSRF.

Learn more about our Web Application Penetration Testing UK.