CVE-2016-5742

SQL injection vulnerability in the XML-RPC interface in Movable Type Pro and Advanced 6.x before 6.1.3 and 6.2.x before 6.2.6 and Movable Type Open Source 5.2.13 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

• CWE-89

• http://www.openwall.com/lists/oss-security/2016/06/22/3Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2016/06/22/5Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2016/06/22/6Mailing List, Third Party Advisory
• http://www.securitytracker.com/id/1036160
• https://movabletype.org/news/2016/06/movable_type_626_and_613_released.htmlRelease Notes, Vendor Advisory
• http://www.openwall.com/lists/oss-security/2016/06/22/3Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2016/06/22/5Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2016/06/22/6Mailing List, Third Party Advisory
• http://www.securitytracker.com/id/1036160
• https://movabletype.org/news/2016/06/movable_type_626_and_613_released.htmlRelease Notes, Vendor Advisory

Published

Jan 23, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-5734phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, an…
• CVE-2016-5735Integer overflow in the rwpng_read_image24_libpng function i…
• CVE-2016-5736The default configuration of the IPsec IKE peer listener in …
• CVE-2016-5737The Gerrit configuration in the Openstack Puppet module for …
• CVE-2016-5739The Transformation implementation in phpMyAdmin 4.0.x before…
• CVE-2016-5740An issue was discovered in Open-Xchange OX App Suite before …
• CVE-2016-5743Siemens SIMATIC WinCC before 7.3 Update 10 and 7.4 before Up…
• CVE-2016-5744Siemens SIMATIC WinCC 7.0 through SP3 and 7.2 allows remote …
• CVE-2016-5745F5 BIG-IP LTM systems 11.x before 11.2.1 HF16, 11.3.x, 11.4.…
• CVE-2016-5746libstorage, libstorage-ng, and yast-storage improperly store…
• CVE-2016-5747A security vulnerability in cookie handling in the http stac…
• CVE-2016-5748External Entity Processing (XXE) vulnerability in the "risk …