İçeriğe atla
Noroxi

typecho kayıtları

typecho üreticisine ait 18 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
1
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17
  2. 18
  3. 23
  4. 24
  5. 25

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

18 kayıt
  • CVE-2018-18753
    40Planlayın

    Typecho V1.1 allows remote attackers to send shell commands via base64-encoded serialized data, as demonstrated by SSRF.

    KritikCVSS 9,8İstismar yokEPSS %3

    typecho · typecho29 Eki 2018

  • CVE-2023-24114
    39İzleyin

    typecho 1.1/17.10.30 was discovered to contain a remote code execution (RCE) vulnerability via install.php.

    KritikCVSS 9,8İstismar yokEPSS %1

    typecho · typecho22 Şub 2023

  • CVE-2024-35540
    37İzleyin

    A stored cross-site scripting (XSS) vulnerability in Typecho v1.3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted

    KritikCVSS 9,0Kavram kanıtıEPSS %3

    typecho · typecho20 Ağu 2024

  • CVE-2023-36299
    36İzleyin

    A File Upload vulnerability in typecho v.1.2.1 allows a remote attacker to execute arbitrary code via the upload and options-general paramet

    YüksekCVSS 8,8İstismar yokEPSS %2

    typecho · typecho3 Ağu 2023

  • CVE-2023-49967
    30İzleyin

    Typecho v1.2.1 was discovered to be vulnerable to an XML Quadratic Blowup attack via the component /index.php/action/xmlrpc.

    YüksekCVSS 7,5İstismar yokEPSS %1

    typecho · typecho7 Ara 2023

  • CVE-2024-35539
    26İzleyin

    Typecho v1.3.0 was discovered to contain a race condition vulnerability in the post commenting function.

    OrtaCVSS 6,5Kavram kanıtıEPSS %1

    typecho · typecho19 Ağu 2024

  • CVE-2024-57369
    25İzleyin

    Clickjacking vulnerability in typecho v1.2.1.

    OrtaCVSS 6,4İstismar yokEPSS %0

    typecho · typecho17 Oca 2025

  • CVE-2020-21038
    24İzleyin

    Open redirect vulnerability in typecho 1.1-17.10.30-release via the referer parameter to Login.php.

    OrtaCVSS 6,1İstismar yokEPSS %0

    typecho · typecho8 May 2023

  • CVE-2023-6615
    21İzleyin

    Typecho manage-users.php information disclosure

    OrtaCVSS 5,3İstismar yokEPSS %1

    typecho · typecho8 Ara 2023

  • CVE-2024-35538
    21İzleyin

    Typecho v1.3.0 was discovered to contain a Client IP Spoofing vulnerability, which allows attackers to falsify their IP addresses by specify

    OrtaCVSS 5,3Kavram kanıtıEPSS %1

    typecho · typecho19 Ağu 2024

  • CVE-2017-16230
    21İzleyin

    In admin/write-post.php in Typecho through 1.1, one can log in to the background page, write a new article, and add payload in the article c

    OrtaCVSS 5,4İstismar yokEPSS %1

    typecho · typecho30 Eki 2017

  • CVE-2023-30184
    21İzleyin

    A stored cross-site scripting (XSS) vulnerability in Typecho v1.2.0 allows attackers to execute arbitrary web scripts or HTML via a crafted

    OrtaCVSS 5,4İstismar yokEPSS %0

    typecho · typecho4 May 2023

  • CVE-2024-46494
    21İzleyin

    A cross-site scripting (XSS) vulnerability in Typecho v1.2.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload

    OrtaCVSS 5,4İstismar yokEPSS %0

    typecho · typecho7 Nis 2025

  • CVE-2023-27711
    19İzleyin

    Cross Site Scripting vulnerability found in Typecho v.1.2.0 allows a remote attacker to execute arbitrary code via the Comment Manager /admi

    OrtaCVSS 4,8İstismar yokEPSS %1

    typecho · typecho16 Mar 2023

  • CVE-2023-27131
    19İzleyin

    Cross Site Scripting vulnerability found in Typecho v.1.2.0 allows a remote attacker to execute arbitrary code viathe Post Editorparameter.

    OrtaCVSS 4,8İstismar yokEPSS %1

    typecho · typecho16 Mar 2023

  • CVE-2023-27130
    19İzleyin

    Cross Site Scripting vulnerability found in Typecho v.1.2.0 allows a remote attacker to execute arbitrary code via an arbitrarily supplied U

    OrtaCVSS 4,8İstismar yokEPSS %1

    typecho · typecho16 Mar 2023

  • CVE-2023-6613
    19İzleyin

    Typecho Logo options-theme.php cross site scripting

    OrtaCVSS 4,8İstismar yokEPSS %1

    typecho · typecho8 Ara 2023

  • CVE-2023-6614
    10İzleyin

    Typecho Page manage-pages.php backdoor

    DüşükCVSS 2,7İstismar yokEPSS %1

    typecho · typecho8 Ara 2023