CVE-2013-0209 Code injection in n/a
Remote attackers can execute arbitrary Perl code and perform SQL injection via unauthenticated database-migration functions in Movable Type.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2013-0209?
CVE-2013-0209 is a high-severity code injection vulnerability in n/a, published on 23 Jan 2013. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
lib/MT/Upgrade.pm in mt-upgrade.cgi in Movable Type 4.2x and 4.3x through 4.38 does not require authentication for requests to database-migration functions, which allows remote attackers to conduct eval injection and SQL injection attacks via crafted parameters, as demonstrated by an eval injection attack against the core_drop_meta_for_table function, leading to execution of arbitrary Perl code.
Weakness: CWE-287
Which versions are affected by CVE-2013-0209?
It affects 1 product.
Products include Sixapart Movable Type.
How do I fix CVE-2013-0209?
Apply the vendor's patch.
Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.
Is CVE-2013-0209 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2013-0209 exists.
Public exploit code: 1 Metasploit module and 1 Exploit-DB entry.
Other vulnerabilities in n/a
Sources
Also known as CVE-2012-6315, DSA-2611-1, GHSA-qhr8-p6mw-gmf5.