high7.5
CVE-2014-9057
SQL injection vulnerability in the XML-RPC interface in Movable Type before 5.18, 5.2.x before 5.2.11, and 6.x before 6.0.6 allows remote attackers to execute …
Impact
SQL injection vulnerability in the XML-RPC interface in Movable Type before 5.18, 5.2.x before 5.2.11, and 6.x before 6.0.6 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Debian | Debian Linux | Version 7.0 |
| Sixapart | Movable Type | through 5.17 Versions 5.2, 5.2.2, 5.2.3, 5.2.4, 5.2.5 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/61227
- https://movabletype.org/documentation/appendices/release-notes/6.0.6.html
- https://movabletype.org/news/2014/12/6.0.6.html
- https://www.debian.org/security/2015/dsa-3183
- http://secunia.com/advisories/61227
- https://movabletype.org/documentation/appendices/release-notes/6.0.6.html
- https://movabletype.org/news/2014/12/6.0.6.html
- https://www.debian.org/security/2015/dsa-3183