Unrated severityNVD Advisory· Published Feb 19, 2015· Updated Jun 17, 2026
CVE-2015-1592
CVE-2015-1592
Description
Movable Type Pro, Open Source, and Advanced before 5.2.12 and Pro and Advanced 6.0.x before 6.0.7 does not properly use the Perl Storable::thaw function, which allows remote attackers to include and execute arbitrary local Perl files and possibly execute arbitrary code via unspecified vectors.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5cpe:2.3:a:sixapart:movable_type:*:*:*:*:advanced:*:*:*+ 2 more
- cpe:2.3:a:sixapart:movable_type:*:*:*:*:advanced:*:*:*range: >=5.2.0,<5.2.12
- cpe:2.3:a:sixapart:movable_type:*:*:*:*:open_source:*:*:*range: >=5.2.0,<5.2.12
- cpe:2.3:a:sixapart:movable_type:*:*:*:*:pro:*:*:*range: >=5.2.0,<5.2.12
- Range: <5.2.12, <6.0.7
Patches
Vulnerability mechanics
References
7- www.openwall.com/lists/oss-security/2015/02/12/17nvdMailing ListThird Party Advisory
- www.openwall.com/lists/oss-security/2015/02/12/2nvdMailing ListThird Party Advisory
- www.securityfocus.com/bid/72606nvdThird Party AdvisoryVDB Entry
- www.securitytracker.com/id/1031777nvdThird Party AdvisoryVDB Entry
- exchange.xforce.ibmcloud.com/vulnerabilities/100912nvdThird Party AdvisoryVDB Entry
- movabletype.org/news/2015/02/movable_type_607_and_5212_released_to_close_security_vulnera.htmlnvdVendor Advisory
- www.debian.org/security/2015/dsa-3183nvdThird Party Advisory
News mentions
0No linked articles in our index yet.