Movable Type before 5.2.6 does not properly use the Storable::thaw function, which allows remote attackers to execute arbitrary code via the commentstate parameter...
7.5CVSS8.1AI score0.03614EPSS
SaveExploits0References4Affected Software1
OSV•added 2015/03/27 2:59 p.m.•5 views
UBUNTU-CVE-2013-2184
Movable Type before 5.2.6 does not properly use the Storable::thaw function, which allows remote attackers to execute arbitrary code via the commentstate parameter...