CVE-2014-9057

ALTO 7.5CVE-2014-9057 · Published 16/12/2014 · updated 17/06/2026

Em resumo

CVE-2014-9057 é uma vulnerabilidade ALTO (CVSS 7.5) que afeta movable type (sixapart).
Chance de exploração nos próximos 30 dias (EPSS): 2.0%, maior que 80.6% das vulnerabilidades.
Ainda não há versão corrigida: acompanhe o aviso do fornecedor em Referências.

Package	Affected versions	Patched versions
movable type sixapart	`= 5.2= 5.2.10= 5.2.2= 5.2.3= 5.2.4= 5.2.5= 5.2.6= 5.2.7= 5.2.8= 5.2.9= 6.0= 6.0.1= 6.0.2= 6.0.3= 6.0.4= 6.0.5≤ 5.17`	No fix yet

Description

SQL injection vulnerability in the XML-RPC interface in Movable Type before 5.18, 5.2.x before 5.2.11, and 6.x before 6.0.6 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

References

secunia.com/advisories/61227
movabletype.org/documentation/appendices/release-notes/6.0.6.html · Vendor Advisory
movabletype.org/news/2014/12/6.0.6.html · Vendor Advisory
debian.org/security/2015/dsa-3183

Mais vulnerabilidades de movable type

Ver tudo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

movable type

sixapart

= 5.2= 5.2.10= 5.2.2= 5.2.3= 5.2.4= 5.2.5= 5.2.6= 5.2.7= 5.2.8= 5.2.9= 6.0= 6.0.1= 6.0.2= 6.0.3= 6.0.4= 6.0.5≤ 5.17

No fix yet

Mais vulnerabilidades de movable type

Ver tudo →