Security Advisory

CVE-2014-9057

7.5

Vulnerability Description

SQL injection vulnerability in the XML-RPC interface in Movable Type before 5.18, 5.2.x before 5.2.11, and 6.x before 6.0.6 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Published Date December 16, 2014
Official Source NIST NVD Advisory