Lucene search
PRIOn knowledge basePRION:CVE-2022-43660HistoryDec 07, 2022 - 4:15 a.m.
Input validation
2022-12-0704:15:00
PRIOn knowledge base
www.prio-n.com
9
input validation
server-side includes
movable type
privilege escalation
remote attack
version vulnerability
os commandζ
Improper neutralization of Server-Side Includes (SSW) within a web page in Movable Type series allows a remote authenticated attacker with Privilege of βManage of Content Typesβ may execute an arbitrary Perl script and/or an arbitrary OS command. Affected products/versions are as follows: Movable Type 7 r.5301 and earlier (Movable Type 7 Series), Movable Type Advanced 7 r.5301 and earlier (Movable Type Advanced 7 Series), Movable Type Premium 1.53 and earlier, and Movable Type Premium Advanced 1.53 and earlier.
| CPE | Name | Operator | Version |
|---|---|---|---|
| movable_type | le | 1.53 | |
| movable_type | le | 1.53 | |
| movable_type | ge | 7.0 | |
| movable_type | lt | 7.9.6 | |
| movable_type | ge | 7.0 | |
| movable_type | lt | 7.9.6 |
Related
nvd
nvd
CVE-2022-43660
2022-12-07 04:15:10
cve
cve
CVE-2022-43660
2022-12-07 04:15:10
cvelist
cvelist
CVE-2022-43660
2022-12-07 00:00:00
jvn
jvn
JVN#37014768: Multiple vulnerabilities in Movable Type
2022-11-16 00:00:00