Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2012-0319
HistoryMar 03, 2012 - 4:04 a.m.

CVE-2012-0319

2012-03-0304:04:57
CWE-94
[email protected]
web.nvd.nist.gov
5

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

AI Score

7.2

Confidence

Low

EPSS

0.005

Percentile

75.3%

JSON

The file-management system in Movable Type before 4.38, 5.0x before 5.07, and 5.1x before 5.13 allows remote authenticated users to execute arbitrary commands by leveraging the file-upload feature, related to an “OS Command Injection” issue.

Affected configurations

Nvd
Node
movabletypemovable_type_open_sourceRange≤4.37
OR
movabletypemovable_type_open_sourceMatch4.0
OR
movabletypemovable_type_open_sourceMatch4.0beta
OR
movabletypemovable_type_open_sourceMatch4.1
OR
movabletypemovable_type_open_sourceMatch4.1beta
OR
movabletypemovable_type_open_sourceMatch4.01beta
OR
movabletypemovable_type_open_sourceMatch4.2
OR
movabletypemovable_type_open_sourceMatch4.2beta
OR
movabletypemovable_type_open_sourceMatch4.3
OR
movabletypemovable_type_open_sourceMatch4.23
OR
movabletypemovable_type_open_sourceMatch4.25
OR
movabletypemovable_type_open_sourceMatch4.26
OR
movabletypemovable_type_open_sourceMatch4.31
OR
movabletypemovable_type_open_sourceMatch4.32
OR
movabletypemovable_type_open_sourceMatch4.33
OR
movabletypemovable_type_open_sourceMatch4.34
OR
movabletypemovable_type_open_sourceMatch4.35
OR
movabletypemovable_type_open_sourceMatch4.36
OR
movabletypemovable_type_open_sourceMatch4.261
OR
movabletypemovable_type_open_sourceMatch4.361
OR
movabletypemovable_type_open_sourceMatch5.1
OR
movabletypemovable_type_open_sourceMatch5.02
OR
movabletypemovable_type_open_sourceMatch5.03
OR
movabletypemovable_type_open_sourceMatch5.04
OR
movabletypemovable_type_open_sourceMatch5.05
OR
movabletypemovable_type_open_sourceMatch5.06
OR
movabletypemovable_type_open_sourceMatch5.11
OR
movabletypemovable_type_open_sourceMatch5.12
OR
movabletypemovable_type_open_sourceMatch5.031
OR
movabletypemovable_type_open_sourceMatch5.051
Node
movabletypemovable_type_enterpriseRange≤4.37
OR
movabletypemovable_type_enterpriseMatch4.0
OR
movabletypemovable_type_enterpriseMatch4.0beta
OR
movabletypemovable_type_enterpriseMatch4.1
OR
movabletypemovable_type_enterpriseMatch4.01beta
OR
movabletypemovable_type_enterpriseMatch4.1beta
OR
movabletypemovable_type_enterpriseMatch4.2
OR
movabletypemovable_type_enterpriseMatch4.2beta
OR
movabletypemovable_type_enterpriseMatch4.3
OR
movabletypemovable_type_enterpriseMatch4.23
OR
movabletypemovable_type_enterpriseMatch4.25
OR
movabletypemovable_type_enterpriseMatch4.26
OR
movabletypemovable_type_enterpriseMatch4.31
OR
movabletypemovable_type_enterpriseMatch4.32
OR
movabletypemovable_type_enterpriseMatch4.33
OR
movabletypemovable_type_enterpriseMatch4.34
OR
movabletypemovable_type_enterpriseMatch4.35
OR
movabletypemovable_type_enterpriseMatch4.36
OR
movabletypemovable_type_enterpriseMatch4.261
OR
movabletypemovable_type_enterpriseMatch4.361
OR
movabletypemovable_type_enterpriseMatch5.1
OR
movabletypemovable_type_enterpriseMatch5.02
OR
movabletypemovable_type_enterpriseMatch5.03
OR
movabletypemovable_type_enterpriseMatch5.04
OR
movabletypemovable_type_enterpriseMatch5.05
OR
movabletypemovable_type_enterpriseMatch5.06
OR
movabletypemovable_type_enterpriseMatch5.11
OR
movabletypemovable_type_enterpriseMatch5.12
OR
movabletypemovable_type_enterpriseMatch5.031
OR
movabletypemovable_type_enterpriseMatch5.051
Node
movabletypemovable_type_advancedRange≤4.37
OR
movabletypemovable_type_advancedMatch4.0
OR
movabletypemovable_type_advancedMatch4.0beta
OR
movabletypemovable_type_advancedMatch4.1
OR
movabletypemovable_type_advancedMatch4.01beta
OR
movabletypemovable_type_advancedMatch4.1beta
OR
movabletypemovable_type_advancedMatch4.2
OR
movabletypemovable_type_advancedMatch4.2beta
OR
movabletypemovable_type_advancedMatch4.3
OR
movabletypemovable_type_advancedMatch4.23
OR
movabletypemovable_type_advancedMatch4.25
OR
movabletypemovable_type_advancedMatch4.26
OR
movabletypemovable_type_advancedMatch4.31
OR
movabletypemovable_type_advancedMatch4.32
OR
movabletypemovable_type_advancedMatch4.33
OR
movabletypemovable_type_advancedMatch4.34
OR
movabletypemovable_type_advancedMatch4.35
OR
movabletypemovable_type_advancedMatch4.36
OR
movabletypemovable_type_advancedMatch4.261
OR
movabletypemovable_type_advancedMatch4.361
OR
movabletypemovable_type_advancedMatch5.1
OR
movabletypemovable_type_advancedMatch5.02
OR
movabletypemovable_type_advancedMatch5.03
OR
movabletypemovable_type_advancedMatch5.04
OR
movabletypemovable_type_advancedMatch5.05
OR
movabletypemovable_type_advancedMatch5.06
OR
movabletypemovable_type_advancedMatch5.11
OR
movabletypemovable_type_advancedMatch5.12
OR
movabletypemovable_type_advancedMatch5.031
OR
movabletypemovable_type_advancedMatch5.051
Node
movabletypemovable_type_proRange≤4.37
OR
movabletypemovable_type_proMatch4.0
OR
movabletypemovable_type_proMatch4.0beta
OR
movabletypemovable_type_proMatch4.1
OR
movabletypemovable_type_proMatch4.1beta
OR
movabletypemovable_type_proMatch4.01beta
OR
movabletypemovable_type_proMatch4.2
OR
movabletypemovable_type_proMatch4.2beta
OR
movabletypemovable_type_proMatch4.3
OR
movabletypemovable_type_proMatch4.23
OR
movabletypemovable_type_proMatch4.25
OR
movabletypemovable_type_proMatch4.26
OR
movabletypemovable_type_proMatch4.31
OR
movabletypemovable_type_proMatch4.32
OR
movabletypemovable_type_proMatch4.33
OR
movabletypemovable_type_proMatch4.34
OR
movabletypemovable_type_proMatch4.35
OR
movabletypemovable_type_proMatch4.36
OR
movabletypemovable_type_proMatch4.261
OR
movabletypemovable_type_proMatch4.361
OR
movabletypemovable_type_proMatch5.1
OR
movabletypemovable_type_proMatch5.02
OR
movabletypemovable_type_proMatch5.03
OR
movabletypemovable_type_proMatch5.04
OR
movabletypemovable_type_proMatch5.05
OR
movabletypemovable_type_proMatch5.06
OR
movabletypemovable_type_proMatch5.11
OR
movabletypemovable_type_proMatch5.12
OR
movabletypemovable_type_proMatch5.031
OR
movabletypemovable_type_proMatch5.051
VendorProductVersionCPE
movabletypemovable_type_open_source*cpe:2.3:a:movabletype:movable_type_open_source:*:*:*:*:*:*:*:*
movabletypemovable_type_open_source4.0cpe:2.3:a:movabletype:movable_type_open_source:4.0:*:*:*:*:*:*:*
movabletypemovable_type_open_source4.0cpe:2.3:a:movabletype:movable_type_open_source:4.0:beta:*:*:*:*:*:*
movabletypemovable_type_open_source4.1cpe:2.3:a:movabletype:movable_type_open_source:4.1:*:*:*:*:*:*:*
movabletypemovable_type_open_source4.1cpe:2.3:a:movabletype:movable_type_open_source:4.1:beta:*:*:*:*:*:*
movabletypemovable_type_open_source4.01cpe:2.3:a:movabletype:movable_type_open_source:4.01:beta:*:*:*:*:*:*
movabletypemovable_type_open_source4.2cpe:2.3:a:movabletype:movable_type_open_source:4.2:*:*:*:*:*:*:*
movabletypemovable_type_open_source4.2cpe:2.3:a:movabletype:movable_type_open_source:4.2:beta:*:*:*:*:*:*
movabletypemovable_type_open_source4.3cpe:2.3:a:movabletype:movable_type_open_source:4.3:*:*:*:*:*:*:*
movabletypemovable_type_open_source4.23cpe:2.3:a:movabletype:movable_type_open_source:4.23:*:*:*:*:*:*:*
Rows per page:
1-10 of 1201

Related

cvelist 1
cve 1
prion 1
jvn 1
ubuntucve 1
nessus 1
openvas 2
cvelist
cvelist
CVE-2012-0319
2012-03-03 02:00:00
cve
cve
CVE-2012-0319
2012-03-03 04:04:57
prion
prion
Command injection
2012-03-03 04:04:00
jvn
jvn
JVN#92683325: Movable Type vulnerable to OS command injection
2012-02-23 00:00:00
ubuntucve
ubuntucve
CVE-2012-0319
2012-03-03 00:00:00
nessus
nessus
Debian DSA-2423-1 : movabletype-opensource - several vulnerabilities
2012-03-05 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-2423-1)
2012-03-12 00:00:00
Debian Security Advisory DSA 2423-1 (movabletype-opensource)
2012-03-12 00:00:00

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

AI Score

7.2

Confidence

Low

EPSS

0.005

Percentile

75.3%

JSON
Related for NVD:CVE-2012-0319
cvelist1cve1prion1jvn1ubuntucve1nessus1openvas2