Six Apart Movable Type Enterprise 4.292
Approved changes feed: RSS · Atom
cpe:2.3:a:sixapart:movable_type:4.292:*:enterprise:*:*:*:*:*
part: a version: 4.292 update: *
| Vendor | Sixapart (543b49bd-f8e0-5cde-b451-64c37d476b91) |
|---|---|
| Product | Movable Type (0b1b8903-7eaa-5490-a1bc-f063c17195fc) |
| Edition | enterprise |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2013-0209 |
vulnerable | 2026-06-08 05:03:45.851679 |
Details available
lib/MT/Upgrade.pm in mt-upgrade.cgi in Movable Type 4.2x and 4.3x through 4.38 does not require authentication for requests to database-migration functions, which allows remote attackers to conduct eval injection and SQL injection attacks via crafted parameters, as demonstrated by an eval injection attack against the core_drop_meta_for_table function, leading to execution of arbitrary Perl code.
Published: 2013-01-23T01:00:00.000Z
Updated: 2024-09-16T23:35:35.688Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.