Description
SQL injection vulnerability in Movable Type 4.x before 4.35 and 5.x before 5.04 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
References
- 1024833 vdb-entry
- JVNDB-2010-000061 third-party-advisory
- ADV-2010-3145 vdb-entry
- 42539 third-party-advisory
- http://www.movabletype.org/documentation/appendices/release-notes/movable-type-504-435-release-notes.html
- JVN#78536512 third-party-advisory