https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 18 Oct 2026 21:47:13 +0000 https://cve.radiocsirt.org/vuln/bdu:2015-01309 bdu:2015-01309 https://cve.radiocsirt.org/vuln/bdu:2015-01309 https://cve.radiocsirt.org/vuln/euvd-2026-176317 EUVD-2026-176317 https://cve.radiocsirt.org/vuln/euvd-2026-176317 https://cve.radiocsirt.org/vuln/fkie_cve-2013-0209 <p>lib/MT/Upgrade.pm in mt-upgrade.cgi in Movable Type 4.2x and 4.3x through 4.38 does not require authentication for requests to database-migration functions, which allows remote attackers to conduct eval injection and SQL injection attacks via crafted parameters, as demonstrated by an eval injection attack against the core_drop_meta_for_table function, leading to execution of arbitrary Perl code.</p> <p>lib/MT/Upgrade.pm in mt-upgrade.cgi in Movable Type 4.2x and 4.3x through 4.38 does not require authentication for requests to database-migration functions, which allows remote attackers to conduct eval injection and SQL injection attacks via crafted parameters, as demonstrated by an eval injection attack against the core_drop_meta_for_table function, leading to execution of arbitrary Perl code.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2013-0209 https://cve.radiocsirt.org/vuln/ghsa-qhr8-p6mw-gmf5 <p>lib/MT/Upgrade.pm in mt-upgrade.cgi in Movable Type 4.2x and 4.3x through 4.38 does not require authentication for requests to database-migration functions, which allows remote attackers to conduct eval injection and SQL injection attacks via crafted parameters, as demonstrated by an eval injection attack against the core_drop_meta_for_table function, leading to execution of arbitrary Perl code.</p> <p>lib/MT/Upgrade.pm in mt-upgrade.cgi in Movable Type 4.2x and 4.3x through 4.38 does not require authentication for requests to database-migration functions, which allows remote attackers to conduct eval injection and SQL injection attacks via crafted parameters, as demonstrated by an eval injection attack against the core_drop_meta_for_table function, leading to execution of arbitrary Perl code.</p> https://cve.radiocsirt.org/vuln/ghsa-qhr8-p6mw-gmf5 https://cve.radiocsirt.org/vuln/gsd-2013-0209 gsd-2013-0209 https://cve.radiocsirt.org/vuln/gsd-2013-0209