Total vulnerabilities in the database
Movable Type Pro, Open Source, and Advanced before 5.2.12 and Pro and Advanced 6.0.x before 6.0.7 does not properly use the Perl Storable::thaw function, which allows remote attackers to include and execute arbitrary local Perl files and possibly execute arbitrary code via unspecified vectors.
| Software | From | Fixed in |
|---|---|---|
| debian / debian_linux | 7.0 | 7.0.x |
| sixapart / movable_type | 5.2.0 | 5.2.12 |
| sixapart / movable_type | 6.0 | 6.0.7 |