CVE-2015-0845

High

Published: 17/04/2015(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

CVE-2015-0845 describes a format string vulnerability in Movable Type Pro, Open Source, and Advanced before version 5.2.13 and Pro and Advanced 6.0.x before version 6.0.8, allowing remote attackers to execute arbitrary code via vectors related to localization of templates.

Risk Assessment

Organizations may be exposed to remote code execution, potentially leading to system takeover or data leakage.

Recommendation

It is recommended to update to the latest version of Movable Type to mitigate this security vulnerability.

Other vulnerabilities in Movable Type Pro, Open Source, Advanced

CVE-2015-1592High
Movable Type Pro, Open Source, and Advanced before version 5.2.12 and Pro and Advanced 6.0.x before version 6.0.7 improperly use the Perl Storable::thaw function, allowing remote attackers to include and execute arbitrary local Perl files and possibly execute arbitrary code.

Original NVD description (English source)

Format string vulnerability in Movable Type Pro, Open Source, and Advanced before 5.2.13 and Pro and Advanced 6.0.x before 6.0.8 allows remote attackers to execute arbitrary code via vectors related to localization of templates.