Unscored DSA-3183-1 3 CVEs

movabletype-opensource - security update

Published Mar 12, 2015 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 7	movabletype-opensource	5.1.4+dfsg-4+deb7u2

Vulnerabilities 3

Unscored —

CVE-2013-2184

Movable Type before 5.2.6 does not properly use the Storable::thaw function, which allows remote attackers to execute a…

Mar 27, 2015
Unscored —

CVE-2014-9057

SQL injection vulnerability in the XML-RPC interface in Movable Type before 5.18, 5.2.x before 5.2.11, and 6.x before 6…

Dec 16, 2014
Unscored —

CVE-2015-1592 Public exploit EPSS 75%

Movable Type Pro, Open Source, and Advanced before 5.2.12 and Pro and Advanced 6.0.x before 6.0.7 does not properly use…

Feb 19, 2015