Vulnerabilities (CVE)

Filtered by vendor Sixapart Subscribe
Filtered by product Movable Type Open Source
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2016-5742 1 Sixapart 2 Movable Type, Movable Type Open Source 2023-12-10 7.5 HIGH 9.8 CRITICAL
SQL injection vulnerability in the XML-RPC interface in Movable Type Pro and Advanced 6.x before 6.1.3 and 6.2.x before 6.2.6 and Movable Type Open Source 5.2.13 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors.