Submit #244885: Typecho Typecho 1.2.1 Information leakageinfo

TitleTypecho Typecho 1.2.1 Information leakage
DescriptionIn Typecho, when users input content other than numbers as a parameter on the admin/manage-users.php?page= page, it throws an error disclosing the installation directory of the program. It is important to ensure proper input validation and error handling to prevent such information disclosure vulnerabilities.
Source⚠️ https://github.com/JTZ-a/SRC/tree/master/Typecho/Typecho-Information%20leakage
User
 JTZ- (UID 59232)
Submission11/29/2023 09:49 (3 years ago)
Moderation12/08/2023 10:17 (9 days later)
StatusAccepted
VulDB entry247250 [Typecho 1.2.1 /admin/manage-users.php page information disclosure]
Points17

Interested in the pricing of exploits?

See the underground prices here!