Typecho V1.1 Remote Command Execution via SSRF

CVE-2018-18753

Typecho V1.1 allows remote attackers to send shell commands via base64-encoded serialized data, as demonstrated by SSRF.

Learn more about our Web Application Penetration Testing UK.