CVE-2015-1592

Related Files

SixApart MovableType Storable Perl Code Execution

Posted May 11, 2015

Authored by John Lightsey | Site metasploit.com

This Metasploit module exploits a serialization flaw in MovableType before 5.2.12 to execute arbitrary code. The default nondestructive mode depends on the target server having the Object::MultiType and DateTime Perl modules installed in Perl's @INC paths. The destructive mode of operation uses only required MovableType dependencies, but it will noticeably corrupt the MovableType installation.

tags | exploit, arbitrary, perl

advisories | CVE-2015-1592

SHA-256 | 17bd25538ea89d3859076c963f08d57cc0e1cb2c94aab6ad5023702b569a06b8

Download | Favorite | View

Debian Security Advisory 3183-1

Posted Mar 13, 2015

Authored by Debian | Site debian.org

Debian Linux Security Advisory 3183-1 - Multiple vulnerabilities have been discovered in Movable Type, a blogging system.

tags | advisory, vulnerability

systems | linux, debian

advisories | CVE-2013-2184, CVE-2014-9057, CVE-2015-1592

SHA-256 | 592285dca6bd1637579875edf0125b54ba6eea6444a6e82c168ebfdfbaf2fa79

Download | Favorite | View