CVE-2022-38078

Movable Type XMLRPC API provided by Six Apart Ltd. contains a command injection vulnerability. Sending a specially crafted message by POST method to Movable Type XMLRPC API may allow arbitrary Perl script execution, and an arbitrary OS command may be executed through it. Affected products and...

CVE-2022-38078

Movable Type XMLRPC API provided by Six Apart Ltd. contains a command injection vulnerability. Sending a specially crafted message by POST method to Movable Type XMLRPC API may allow arbitrary Perl script execution, and an arbitrary OS command may be executed through it. Affected products and...

CVE-2022-38078

CVE-2022-38078 affects Movable Type XMLRPC API. A POST request to the XMLRPC endpoint can execute arbitrary Perl scripts and OS commands due to a command-injection flaw in MT/MT Advanced/MT Premium lines (versions 7 r.5202 and earlier; 6.8.6 and earlier; 1.52 and earlier). All MT 4.0+ EOL version...