Free and open-source vulnerability scanner
Mageni eases for you the vulnerability scanning, assessment, and management process. It is free and open-source.
Install NowAvailable for macOS, Windows, and Linux
CVE-2012-0319
CVE information
Published
Last Modified
CVSSv2.0 Severity
Impact Analysis
Description
The file-management system in Movable Type before 4.38, 5.0x before 5.07, and 5.1x before 5.13 allows remote authenticated users to execute arbitrary commands by leveraging the file-upload feature, related to an "OS Command Injection" issue..
CVSSv2.0 Score
- Severity
- Medium
- Base Score
- 6.5/10
- Exploit Score
- 8/10
- Access Vector
- Network
- Access Complexity
- Low
- Authentication Required
- Single
- Impact Score
- 6.4/10
- Confidentiality Impact
- Partial
- Availability Impact
- Partial
- Integrity Impact
- Partial
Products Affected
CPE | Affected | Vulnerable | Excluding | Edit |
---|---|---|---|---|
cpe:2.3:a:movabletype:movable_type_open_source:4.34:*:*:*:*: |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_open_source:5.12:*:*:*:*: |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_open_source:4.35:*:*:*:*: |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_open_source:4.1:beta:*:*: |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_open_source:4.26:*:*:*:*: |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_open_source:4.32:*:*:*:*: |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_open_source:4.25:*:*:*:*: |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_open_source:5.04:*:*:*:*: |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_open_source:4.361:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_open_source:*:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_open_source:4.31:*:*:*:*: |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_open_source:4.23:*:*:*:*: |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_open_source:5.05:*:*:*:*: |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_open_source:5.1:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_open_source:4.1:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_open_source:4.261:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_open_source:4.0:beta:*:*: |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_open_source:4.2:beta:*:*: |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_open_source:4.3:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_open_source:5.051:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_open_source:5.03:*:*:*:*: |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_open_source:4.36:*:*:*:*: |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_open_source:4.0:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_open_source:5.02:*:*:*:*: |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_open_source:5.11:*:*:*:*: |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_open_source:4.2:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_open_source:5.031:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_open_source:5.06:*:*:*:*: |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_open_source:4.01:beta:*:* |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_open_source:4.33:*:*:*:*: |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_enterprise:4.0:beta:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_enterprise:4.23:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_enterprise:4.261:*:*:*:*: |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_enterprise:4.32:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_enterprise:5.051:*:*:*:*: |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_enterprise:4.34:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_enterprise:4.35:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_enterprise:*:*:*:*:*:*:*: |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_enterprise:5.05:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_enterprise:4.2:beta:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_enterprise:5.02:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_enterprise:4.1:*:*:*:*:*: |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_enterprise:4.361:*:*:*:*: |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_enterprise:4.3:*:*:*:*:*: |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_enterprise:5.04:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_enterprise:5.06:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_enterprise:4.0:*:*:*:*:*: |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_enterprise:4.36:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_enterprise:4.26:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_enterprise:4.01:beta:*:*: |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_enterprise:5.12:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_enterprise:4.31:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_enterprise:4.25:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_enterprise:5.1:*:*:*:*:*: |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_enterprise:4.1:beta:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_enterprise:4.2:*:*:*:*:*: |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_enterprise:5.11:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_enterprise:4.33:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_enterprise:5.03:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_enterprise:5.031:*:*:*:*: |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_advanced:4.26:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_advanced:5.02:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_advanced:4.35:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_advanced:5.11:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_advanced:5.051:*:*:*:*:*: |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_advanced:4.36:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_advanced:5.06:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_advanced:5.1:*:*:*:*:*:*: |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_advanced:4.25:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_advanced:4.31:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_advanced:4.33:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_advanced:4.2:*:*:*:*:*:*: |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_advanced:4.23:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_advanced:5.04:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_advanced:4.01:beta:*:*:*: |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_advanced:4.0:beta:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_advanced:4.1:beta:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_advanced:5.05:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_advanced:5.031:*:*:*:*:*: |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_advanced:4.32:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_advanced:5.12:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_advanced:4.361:*:*:*:*:*: |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_advanced:4.0:*:*:*:*:*:*: |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_advanced:4.1:*:*:*:*:*:*: |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_advanced:4.261:*:*:*:*:*: |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_advanced:5.03:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_advanced:4.34:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_advanced:4.3:*:*:*:*:*:*: |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_advanced:*:*:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_advanced:4.2:beta:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_pro:5.11:*:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_pro:4.2:beta:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_pro:4.1:*:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_pro:4.23:*:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_pro:4.2:*:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_pro:4.32:*:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_pro:4.261:*:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_pro:5.05:*:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_pro:5.04:*:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_pro:4.1:beta:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_pro:4.34:*:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_pro:4.0:*:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_pro:4.3:*:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_pro:*:*:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_pro:5.051:*:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_pro:4.35:*:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_pro:4.33:*:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_pro:5.06:*:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_pro:5.03:*:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_pro:5.031:*:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_pro:4.25:*:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_pro:4.01:beta:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_pro:4.31:*:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_pro:4.36:*:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_pro:4.361:*:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_pro:4.26:*:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_pro:5.1:*:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_pro:5.02:*:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_pro:5.12:*:*:*:*:*:*:* |
Yes
|
- | - | |
cpe:2.3:a:movabletype:movable_type_pro:4.0:beta:*:*:*:*:*:* |
Yes
|
- | - |
References
- http://jvndb.jvn.jp/jvndb/JVNDB-2012-000017
- http://www.movabletype.org/2012/02/movable_type_513_507_and_438_security_updates.html
- http://jvn.jp/en/jp/JVN92683325/index.html
- http://www.movabletype.org/documentation/appendices/release-notes/513.html
- http://www.securitytracker.com/id?1026738
- http://www.securityfocus.com/bid/52138
- http://www.debian.org/security/2012/dsa-2423