VYPR
Get started
← All advisories
Unrated severityNVD Advisory· Published Apr 17, 2015· Updated May 6, 2026

CVE-2015-0845

CVE-2015-0845

Description

Format string vulnerability in Movable Type Pro, Open Source, and Advanced before 5.2.13 and Pro and Advanced 6.0.x before 6.0.8 allows remote attackers to execute arbitrary code via vectors related to localization of templates.

Affected products

19
  • Sixapart/Movabletype19 versions
    cpe:2.3:a:sixapart:movabletype:6.0.1:*:*:*:advanced:*:*:*+ 18 more
    • cpe:2.3:a:sixapart:movabletype:6.0.1:*:*:*:advanced:*:*:*
    • cpe:2.3:a:sixapart:movabletype:6.0.1:*:*:*:pro:*:*:*
    • cpe:2.3:a:sixapart:movabletype:6.0.2:*:*:*:advanced:*:*:*
    • cpe:2.3:a:sixapart:movabletype:6.0.2:*:*:*:pro:*:*:*
    • cpe:2.3:a:sixapart:movabletype:6.0.3:*:*:*:advanced:*:*:*
    • cpe:2.3:a:sixapart:movabletype:6.0.3:*:*:*:pro:*:*:*
    • cpe:2.3:a:sixapart:movabletype:6.0.4:*:*:*:advanced:*:*:*
    • cpe:2.3:a:sixapart:movabletype:6.0.4:*:*:*:pro:*:*:*
    • cpe:2.3:a:sixapart:movabletype:6.0.5:*:*:*:advanced:*:*:*
    • cpe:2.3:a:sixapart:movabletype:6.0.5:*:*:*:pro:*:*:*
    • cpe:2.3:a:sixapart:movabletype:6.0.6:*:*:*:advanced:*:*:*
    • cpe:2.3:a:sixapart:movabletype:6.0.6:*:*:*:pro:*:*:*
    • cpe:2.3:a:sixapart:movabletype:6.0.7:*:*:*:advanced:*:*:*
    • cpe:2.3:a:sixapart:movabletype:6.0.7:*:*:*:pro:*:*:*
    • cpe:2.3:a:sixapart:movabletype:6.0:*:*:*:advanced:*:*:*
    • cpe:2.3:a:sixapart:movabletype:6.0:*:*:*:pro:*:*:*
    • cpe:2.3:a:sixapart:movabletype:*:*:*:*:advanced:*:*:*range: <=5.2.11
    • cpe:2.3:a:sixapart:movabletype:*:*:*:*:open_source:*:*:*range: <=5.2.11
    • cpe:2.3:a:sixapart:movabletype:*:*:*:*:pro:*:*:*range: <=5.2.11

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

3

News mentions

0

No linked articles in our index yet.