CVE-2014-9057
Severity Score
7.5
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
SQL injection vulnerability in the XML-RPC interface in Movable Type before 5.18, 5.2.x before 5.2.11, and 6.x before 6.0.6 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Vulnerabilidad de inyección SQL en la interfaz XML-RPC en Movable Type anterior a 5.18, 5.2.x anterior a 5.2.11, y 6.x anterior a 6.0.6 permite a atacantes remotos ejecutar comandos SQL arbitrarios a través de vectores no especificados.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2014-11-23 CVE Reserved
- 2014-12-16 CVE Published
- 2024-08-06 CVE Updated
- 2024-10-28 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CAPEC
References (4)
| URL | Tag | Source |
|---|---|---|
| http://secunia.com/advisories/61227 | Third Party Advisory |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://movabletype.org/documentation/appendices/release-notes/6.0.6.html | 2015-11-17 | |
| https://movabletype.org/news/2014/12/6.0.6.html | 2015-11-17 | |
| https://www.debian.org/security/2015/dsa-3183 | 2015-11-17 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Debian Search vendor "Debian" | Debian Linux Search vendor "Debian" for product "Debian Linux" | 7.0 Search vendor "Debian" for product "Debian Linux" and version "7.0" | - |
Affected
| ||||||
| Sixapart Search vendor "Sixapart" | Movable Type Search vendor "Sixapart" for product "Movable Type" | <= 5.17 Search vendor "Sixapart" for product "Movable Type" and version " <= 5.17" | - |
Affected
| ||||||
| Sixapart Search vendor "Sixapart" | Movable Type Search vendor "Sixapart" for product "Movable Type" | 5.2 Search vendor "Sixapart" for product "Movable Type" and version "5.2" | - |
Affected
| ||||||
| Sixapart Search vendor "Sixapart" | Movable Type Search vendor "Sixapart" for product "Movable Type" | 5.2.2 Search vendor "Sixapart" for product "Movable Type" and version "5.2.2" | - |
Affected
| ||||||
| Sixapart Search vendor "Sixapart" | Movable Type Search vendor "Sixapart" for product "Movable Type" | 5.2.3 Search vendor "Sixapart" for product "Movable Type" and version "5.2.3" | - |
Affected
| ||||||
| Sixapart Search vendor "Sixapart" | Movable Type Search vendor "Sixapart" for product "Movable Type" | 5.2.4 Search vendor "Sixapart" for product "Movable Type" and version "5.2.4" | - |
Affected
| ||||||
| Sixapart Search vendor "Sixapart" | Movable Type Search vendor "Sixapart" for product "Movable Type" | 5.2.5 Search vendor "Sixapart" for product "Movable Type" and version "5.2.5" | - |
Affected
| ||||||
| Sixapart Search vendor "Sixapart" | Movable Type Search vendor "Sixapart" for product "Movable Type" | 5.2.6 Search vendor "Sixapart" for product "Movable Type" and version "5.2.6" | - |
Affected
| ||||||
| Sixapart Search vendor "Sixapart" | Movable Type Search vendor "Sixapart" for product "Movable Type" | 5.2.7 Search vendor "Sixapart" for product "Movable Type" and version "5.2.7" | - |
Affected
| ||||||
| Sixapart Search vendor "Sixapart" | Movable Type Search vendor "Sixapart" for product "Movable Type" | 5.2.8 Search vendor "Sixapart" for product "Movable Type" and version "5.2.8" | - |
Affected
| ||||||
| Sixapart Search vendor "Sixapart" | Movable Type Search vendor "Sixapart" for product "Movable Type" | 5.2.9 Search vendor "Sixapart" for product "Movable Type" and version "5.2.9" | - |
Affected
| ||||||
| Sixapart Search vendor "Sixapart" | Movable Type Search vendor "Sixapart" for product "Movable Type" | 5.2.10 Search vendor "Sixapart" for product "Movable Type" and version "5.2.10" | - |
Affected
| ||||||
| Sixapart Search vendor "Sixapart" | Movable Type Search vendor "Sixapart" for product "Movable Type" | 6.0 Search vendor "Sixapart" for product "Movable Type" and version "6.0" | - |
Affected
| ||||||
| Sixapart Search vendor "Sixapart" | Movable Type Search vendor "Sixapart" for product "Movable Type" | 6.0.1 Search vendor "Sixapart" for product "Movable Type" and version "6.0.1" | - |
Affected
| ||||||
| Sixapart Search vendor "Sixapart" | Movable Type Search vendor "Sixapart" for product "Movable Type" | 6.0.2 Search vendor "Sixapart" for product "Movable Type" and version "6.0.2" | - |
Affected
| ||||||
| Sixapart Search vendor "Sixapart" | Movable Type Search vendor "Sixapart" for product "Movable Type" | 6.0.3 Search vendor "Sixapart" for product "Movable Type" and version "6.0.3" | - |
Affected
| ||||||
| Sixapart Search vendor "Sixapart" | Movable Type Search vendor "Sixapart" for product "Movable Type" | 6.0.4 Search vendor "Sixapart" for product "Movable Type" and version "6.0.4" | - |
Affected
| ||||||
| Sixapart Search vendor "Sixapart" | Movable Type Search vendor "Sixapart" for product "Movable Type" | 6.0.5 Search vendor "Sixapart" for product "Movable Type" and version "6.0.5" | - |
Affected
| ||||||