Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

remove a repeat for CVE-2013-0209 #144

Closed
wants to merge 3 commits into from
Closed
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
22 changes: 0 additions & 22 deletions cpansa/CPANSA-MT.yml
Original file line number Diff line number Diff line change
Expand Up @@ -480,28 +480,6 @@
- http://seclists.org/oss-sec/2013/q2/560
reported: 2015-03-27
severity: ~
- affected_versions:
- '>=4.20,<4.38'
cves:
- CVE-2013-0209
description: >
lib/MT/Upgrade.pm in mt-upgrade.cgi in Movable Type 4.2x and 4.3x
through 4.38 does not require authentication for requests to
database-migration functions, which allows remote attackers to conduct
eval injection and SQL injection attacks via crafted parameters, as
demonstrated by an eval injection attack against the
core_drop_meta_for_table function, leading to execution of arbitrary
Perl code.
distribution: MT
fixed_versions: ~
id: CPANSA-MT-2013-0209
references:
- http://www.sec-1.com/blog/wp-content/uploads/2013/01/movabletype_upgrade_exec.rb_.txt
- http://www.movabletype.org/2013/01/movable_type_438_patch.html
- http://openwall.com/lists/oss-security/2013/01/22/3
- http://www.sec-1.com/blog/?p=402
reported: 2013-01-23
severity: ~
- affected_versions: "=5.13"
cves:
- CVE-2012-1503
Expand Down
Loading