CVE-2015-0845 Format string vulnerability in Movable Type Pro, Open Source, and Advanced before 5.2.13 and Pro and Advanced 6.0.x before 6.0.8 allows remote attackers to execute arbitrary code via vectors related t...
HighCVSS 7.5
EPSS 3.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Format string vulnerability in Movable Type Pro, Open Source, and Advanced before 5.2.13 and Pro and Advanced 6.0.x before 6.0.8 allows remote attackers to execute arbitrary code via vectors related to localization of templates.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sixapart movabletype | <= 5.2.11 | No fix listed |
| sixapart movabletype | = 6.0 | No fix listed |
| sixapart movabletype | = 6.0.1 | No fix listed |
| sixapart movabletype | = 6.0.2 | No fix listed |
| sixapart movabletype | = 6.0.3 | No fix listed |
| sixapart movabletype | = 6.0.4 | No fix listed |
| sixapart movabletype | = 6.0.5 | No fix listed |
| sixapart movabletype | = 6.0.6 | No fix listed |
| sixapart movabletype | = 6.0.7 | No fix listed |
References
- DSA-3227 vendor-advisory
- 1032153 vdb-entry
- movabletype.org vendor-advisory