CVE-2012-0319
movabletype: no CVSS score yet. EPSS 2.3% chance of exploitation in the next 30 days.
The file-management system in Movable Type before 4.38, 5.0x before 5.07, and 5.1x before 5.13 allows remote authenticated users to execute arbitrary commands by leveraging the file-upload feature, related to an "OS Command Injection" issue.
- EPSS
- 2.3% chance of exploitation in the next 30 days; higher than 83% of CVEs (scores of 2026-10-31)
- CWE
- CWE-94
- Published
- Modified
- Record from
- the NVD, synced
Affected
- movabletype:movable_type_advanced
- movabletype:movable_type_enterprise
- movabletype:movable_type_open_source
- movabletype:movable_type_pro