Description (CNA)
SQL injection vulnerability in the XML-RPC interface in Movable Type before 5.18, 5.2.x before 5.2.11, and 6.x before 6.0.6 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://secunia.com/advisories/61227
- https://www.debian.org/security/2015/dsa-3183
- https://movabletype.org/news/2014/12/6.0.6.html
- https://movabletype.org/documentation/appendices/release-notes/6.0.6.html
ADP enrichment
No English description supplied.