Servers and applications
CVE-2015-1592
Movable Type Pro, Open Source, and Advanced before 5.2.12 and Pro and Advanced 6.0.x before 6.0.7 does not properly use the Perl Storable::thaw function, which allows remote attackers to include and execute arbitrary local Perl files and possibly execute arbitrary code via unspecified vectors.
- Severity
- High 7.5
- Published
- 19 Feb 2015
- Last changed
- 17 Jun 2026
- Added to UpHeron
- 1 Nov 2026
- Fixed in
- 5.2.12, 6.0.7
- Exploit chance
- 75% in the next 30 daysHigher than 99% of CVEs. EPSS by FIRST, 11 Nov 2026
- Weakness
- Injection (CWE-74)
- Attack
- Over the network · No login needed
- Attacker can
- Read some data · Change some data · Slow it down
- CVSS vector
AV:N/AC:L/Au:N/C:P/I:P/A:P- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
Movable TypeServers and applications · cpe:a:sixapart:movable_type |
|