Test ID:	1.3.6.1.4.1.25623.1.0.805368
Category:	Web application abuses
Title:	Movable Type < 5.2.6 Arbitrary Code Execution Vulnerability
Summary:	Movable Type is prone to an arbitrary code execution; vulnerability.
Description:	Summary: Movable Type is prone to an arbitrary code execution vulnerability. Vulnerability Insight: The flaw is due to the Perl Storable::thaw function which allows remote attackers to include and execute arbitrary local Perl files and possibly execute arbitrary code. Vulnerability Impact: Successful exploitation will allow an unauthenticated remote attacker to upload files and execute arbitrary code in an affected site. Affected Software/OS: Movable Type prior to version 5.2.6. Solution: Update to version 5.2.6 or later. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2013-2184 Debian Security Information: DSA-3183 (Google Search) http://www.debian.org/security/2015/dsa-3183 https://movabletype.org/documentation/appendices/release-notes/movable-type-526-release-notes.html http://seclists.org/oss-sec/2013/q2/560 http://seclists.org/oss-sec/2013/q2/568
Copyright	Copyright (C) 2015 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.