← back
CVE-2015-1592

CVE-2015-1592

EPSS 75.0%
Movable Type Pro, Open Source, and Advanced before 5.2.12 and Pro and Advanced 6.0.x before 6.0.7 does not properly use the Perl Storable::thaw function, which allows remote attackers to include and execute arbitrary local Perl files and possibly execute arbitrary code via unspecified vectors.
Affected products
n/a · n/a
public PoCs found — 2
githubgithub.com/lightsey/cve-2015-1592★ 6exploitdbwww.exploit-db.com/exploits/41697unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://exchange.xforce.ibmcloud.com/vulnerabilities/100912https://movabletype.org/news/2015/02/movable_type_607_and_5212_released_to_close_security_vulnera.htmlhttps://www.debian.org/security/2015/dsa-3183http://www.openwall.com/lists/oss-security/2015/02/12/17http://www.openwall.com/lists/oss-security/2015/02/12/2http://www.securityfocus.com/bid/72606http://www.securitytracker.com/id/1031777