A critical vulnerability was discovered in Movable Type, a content management system provided by Six Apart Ltd. The vulnerability, tracked as CVE-2026-25776, allows an attacker to execute arbitrary Perl script, potentially leading to unauthorized access and data breaches. This vulnerability has significant implications for the security of websites and data managed through Movable Type. Administrators and [truncated]
CVE-2016-5742 is a critical SQL injection vulnerability in Movable Type’s XML-RPC interface. According to the NVD record, a remote attacker can execute arbitrary SQL commands, which can expose, alter, or destroy data in affected installations. The issue affects Movable Type Pro and Advanced 6.x before 6.1.3 and 6.2.x before 6.2.6, as well as Movable Type Open Source 5.2.13 and earlier. The CVE record was [truncated]
