CVE-2015-1592

Movable Type Pro, Open Source, and Advanced before 5.2.12 and Pro and Advanced 6.0.x before 6.0.7 does not properly use the Perl Storable::thaw function, which allows remote attackers to include and execute arbitrary local Perl files and possibly execute arbitrary code via unspecified vectors.

• CWE-74

• http://www.openwall.com/lists/oss-security/2015/02/12/17Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2015/02/12/2Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/72606Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1031777Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/100912Third Party Advisory, VDB Entry
• https://movabletype.org/news/2015/02/movable_type_607_and_5212_released_to_close_security_vulnera.htmlVendor Advisory
• https://www.debian.org/security/2015/dsa-3183Third Party Advisory
• http://www.openwall.com/lists/oss-security/2015/02/12/17Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2015/02/12/2Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/72606Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1031777Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/100912Third Party Advisory, VDB Entry
• https://movabletype.org/news/2015/02/movable_type_607_and_5212_released_to_close_security_vulnera.htmlVendor Advisory
• https://www.debian.org/security/2015/dsa-3183Third Party Advisory

Published

Feb 19, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-1585Fat Free CRM before 0.13.6 allows remote attackers to conduc…
• CVE-2015-1587Unrestricted file upload vulnerability in file_to_index.php …
• CVE-2015-1588Multiple cross-site scripting (XSS) vulnerabilities in Open-…
• CVE-2015-1589Directory traversal vulnerability in arCHMage 0.2.4 allows r…
• CVE-2015-1590The kamcmd administrative utility and default configuration …
• CVE-2015-1591The kamailio build in kamailio before 4.2.0-2 process allows…
• CVE-2015-1593The stack randomization feature in the Linux kernel before 3…
• CVE-2015-1594Untrusted search path vulnerability in Siemens SIMATIC ProSa…
• CVE-2015-1595The Siemens SPCanywhere application for Android and iOS does…
• CVE-2015-1596The Siemens SPCanywhere application for Android and iOS does…
• CVE-2015-1597The Siemens SPCanywhere application for Android does not use…
• CVE-2015-1598The Siemens SPCanywhere application for Android does not pro…