CVE-2015-2945

mt-phpincgi (Movable Type template script) is vulnerable to PHP object injection due to improper URL restriction in mt-phpincgi prior to 2015-05-15. This allows unauthenticated remote attackers to execute arbitrary PHP code on the server via a crafted request, with exploitation reported in the wi...