RCE in Sixapart Movabletype
CVE-2015-0845
Format string vulnerability in Movable Type Pro, Open Source, and Advanced before 5.2.13 and Pro and Advanced 6.0.x before 6.0.8 allows remote attackers to execute arbitrary code via vectors related to localization of templates.
Vulnerability class: RCE (Remote Code Execution)
EPSS: 0.037 (88.7th percentile) — read the EPSS interpretation.
Affected products
- Sixapart Movabletype — versions 6.0, 6.0.1, 6.0.2
- N/a — versions n/a
Weakness classification (CWE)
References
- security@debian.org (vendor-advisory, x_refsource_DEBIAN)
- security@debian.org (vdb-entry, x_refsource_SECTRACK)
- security@debian.org (x_refsource_CONFIRM, Vendor Advisory)