Description
Typecho 是一个基于 PHP 的博客系统，广泛用于个人和企业博客管理。Typecho v1.1 版本的 /install.php 文件存在远程代码执行漏洞。由于安装完成后未自动删除 install.php 文件，攻击者可通过特制的请求利用反序列化漏洞，执行任意代码，获取服务器权限并控制整个服务器。
Typecho /install.php 远程代码执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.wangsansan.com/archives/18/
https://github.com/typecho/typecho/issues/619
https://www.cnblogs.com/wuhongbin/p/15526142.html
https://cn.t00ls.com/articles-42355.html
https://blog.nsfocus.net/typecho-vulnerability-analysis/
https://zhuanlan.zhihu.com/p/611495872
https://rivers.chaitin.cn/blog/cq94bip0lnechd242un0
https://blog.csdn.net/weixin_43058307/article/details/119118504
https://kylingit.com/blog/typecho-install.php-%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E6%BC%8F%E6%B4%9E%E5%88%86%E6%9E%90/
https://cloud.tencent.com/developer/article/1922080
https://yoga7xm.top/2019/06/01/typecho/
https://lorexxar.cn/2017/10/26/typecho-getshell/
https://www.tenable.com/cve/CVE-2023-24114
https://medium.com/@knownsec404team/analysis-of-typecho-front-end-getshell-vulnerability-4c1ce43eaeaa