CVE-2023-36299

A File Upload vulnerability in typecho v.1.2.1 allows a remote attacker to execute arbitrary code via the upload and options-general parameters in index.php.


We have discovered 1,903 live websites that are affected by CVE-2023-36299.

Run a Free Instant Scan




Affected Software

Product  Typecho
Category Blogs
Vulnerable Domains1,903 live websites (100% of Typecho install base)
Vulnerable Versions
  • from 0 through 1.2.1
Vulnerable Versions Count0 versions ( less than 0.1% of all versions)



Details

  • Published - Aug 3, 2023
  • Updated - Oct 17, 2024

Website Distribution by Country

Number of websites using CVE-2023-36299
United States483 websites



China998 websites
Singapore197 websites
Hong Kong89 websites
Canada47 websites
Japan12 websites
GB10 websites
France8 websites
Germany7 websites

Website Distribution by TLD

Number of websites using CVE-2023-36299
.com793 websites
.cn412 websites
.net115 websites
.org42 websites
.info15 websites
.com.cn10 websites
.ca3 websites
.co3 websites
.de3 websites
.io3 websites

Websites affected by CVE-2023-36299

Top websites that are affected by CVE-2023-36299. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
*****.com China*,***
*******.org United States**,***
*****.com Singapore**,***
******.com China**,***
********.net United States***,***
*****.com Singapore***,***
******.com Singapore***,***
***.me United States***,***
*******.com China***,***
*********.com United States***,***
See full domain list

FAQ

A total of 1,903 websites have been identified as vulnerable to CVE-2023-36299, based on global website indexing conducted by WebTechSurvey.
The Typecho is affected by the CVE-2023-36299 vulnerability.
Typecho versions up to and including 1.2.1 are vulnerable to CVE-2023-36299.