⚡ Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →

CVE-2013-2184

HIGH · 7.5 CVSS Gepubliceerd: 27-03-2015 CWE-17

Beschrijving

Movable Type before 5.2.6 does not properly use the Storable::thaw function, which allows remote attackers to execute arbitrary code via the comment_state parameter.

Vendors

Sixapart

Affected products

Movable Type

References

seclists.org
seclists.org
www.debian.org
movabletype.org