CVE-2014-9057: SQL Injection
SQL injection vulnerability in the XML-RPC interface in Movable Type before 5.18, 5.2.x before 5.2.11, and 6.x before 6.0.6 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-9057?
CVE-2014-9057 is classified as a critical vulnerability due to its potential to allow remote attackers to execute arbitrary SQL commands.
How do I fix CVE-2014-9057?
To fix CVE-2014-9057, upgrade Movable Type to version 6.0.6 or later, or apply any available patches provided by your vendor.
What versions of Movable Type are affected by CVE-2014-9057?
CVE-2014-9057 affects Movable Type versions prior to 5.18, 5.2.x before 5.2.11, and 6.x before 6.0.6.
Can CVE-2014-9057 lead to data compromise?
Yes, CVE-2014-9057 can lead to data compromise as it permits execution of arbitrary SQL queries, potentially exposing sensitive data.
Is CVE-2014-9057 a common vulnerability?
CVE-2014-9057 is a specific vulnerability in Movable Type's XML-RPC interface, making it particularly relevant to users of that software.