CVE-2014-9057 Information

Description

SQL injection vulnerability in the XML-RPC interface in Movable Type before 5.18 5.2.x before 5.2.11 and 6.x before 6.0.6 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Reference

http://secunia.com/advisories/61227 https://movabletype.org/documentation/appendices/release-notes/6.0.6.html https://movabletype.org/news/2014/12/6.0.6.html https://www.debian.org/security/2015/dsa-3183