CVE-2013-2184

Movable Type before 5.2.6 does not properly use the Storable::thaw function, which allows remote attackers to execute arbitrary code via the comment_state…

published March 27, 2015

CVSS
—
EPSS
4%
Percentile
89.4
In the wild
Unconfirmed
What it is

Movable Type before 5.2.6 does not properly use the Storable::thaw function, which allows remote attackers to execute arbitrary code via the comment_state parameter.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03614 · 89.4th percentile
Published
2015-03-27T14:00Z
EPSS history
Timeline
  • 27 MAR 14:00Z
    Movable Type before 5.2.6 does not properly use the Storable::thaw function, which allows remote attackers to execute arbitrary code via the comment_state…
    cvelistv5