9.8
CVSS 3.0
Няма данни
Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)
Няма потвърждение
Атакува се
Няма данни
Време до експлоатация
Атакува се по мрежата, без особени условия, без вход и без действие от потребителя.
- Експлоатация: няма данни за експлоатация
- Атаката може да се автоматизира
Описание
Оригинално описание
Movable Type provided by Six Apart Ltd. contains a code injection vulnerability which may allow an attacker to execute arbitrary Perl script.
Засегнати продукти
- Six Apart Ltd. Movable Type: 9.1.0 and earlier
- Six Apart Ltd. Movable Type: 9.0.6 and earlier
- Six Apart Ltd. Movable Type: 8.8.2 and earlier
- Six Apart Ltd. Movable Type: 8.0.9 and earlier
- Six Apart Ltd. Movable Type Advanced: 9.1.0 and earlier
- Six Apart Ltd. Movable Type Advanced: 9.0.6 and earlier
- Six Apart Ltd. Movable Type Advanced: 8.8.2 and earlier
- Six Apart Ltd. Movable Type Advanced: 8.0.9 and earlier
- Six Apart Ltd. Movable Type Premium: 9.1.0 and earlier
- Six Apart Ltd. Movable Type Premium: 9.0.6 and earlier
- Six Apart Ltd. Movable Type Premium Advanced Edition: 9.1.0 and earlier
- Six Apart Ltd. Movable Type Premium Advanced Edition: 9.0.6 and earlier
- Six Apart Ltd. Movable Type Premium: 2.14 and earlier
- Six Apart Ltd. Movable Type Premium Advanced Edition: 2.14 and earlier
- Six Apart Ltd. Movable Type Premium (MT8-based): 2.14 and earlier
- Six Apart Ltd. Movable Type: 5.1 to 5.18
- Six Apart Ltd. Movable Type: 5.2; 5.2.1 to 5.2.13
- Six Apart Ltd. Movable Type: 6.0; 6.0.1 to 6.8.8
- Six Apart Ltd. Movable Type: 7 r.4207 to r.5510
- Six Apart Ltd. Movable Type: 8.4.0 to 8.4.4
- Six Apart Ltd. Movable Type: 1.0 to 1.68
Вид слабост
История
- 8 април 2026 Публикувано