VULNERABILITY INTELLIGENCE

CVE-2012-0319

CVSS score6.5 MEDIUM
EPSS probability2.33%
CISA KEVNot currently listed
Published2012-03-03
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:S/C:P/I:P/A:P

Description

The file-management system in Movable Type before 4.38, 5.0x before 5.07, and 5.1x before 5.13 allows remote authenticated users to execute arbitrary commands by leveraging the file-upload feature, related to an "OS Command Injection" issue.

Weakness classification

  • CWE-94: Improper Control of Generation of Code ('Code Injection')

Primary references