CVE-2012-0319
The file-management system in Movable Type before 4.38, 5.0x before 5.07, and 5.1x before 5.13...
CVE-2012-0319 is a medium vulnerability (CVSS 6.5) in Movabletype Movable Type Advanced, published March 2, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.33%, the 83rd percentile. No source names a fixed version.
- Severity
- 6.5 MediumCVSS 2.0, NVD
- Exploit chance
- 2.33%EPSS, 83rd percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
The file-management system in Movable Type before 4.38, 5.0x before 5.07, and 5.1x before 5.13 allows remote authenticated users to execute arbitrary commands by leveraging the file-upload feature, related to an "OS Command Injection" issue.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
movabletype-opensourceDebian:6.0 From an advisory covering 8 CVEs | before 4.3.8+dfsg-0+squeeze2, plus listed versions 4.3.5+dfsg-24.3.5+dfsg-2+squeeze14.3.5+dfsg-2+squeeze24.3.5+dfsg-34.3.6+dfsg-14.3.6.1+dfsg-14.3.7+dfsg-1 | 4.3.8+dfsg-0+squeeze2 |
What each source reports
NVD Score used
The file-management system in Movable Type before 4.38, 5.0x before 5.07, and 5.1x before 5.13 allows remote authenticated users to execute arbitrary commands by leveraging the file-upload feature, related to an "OS Command Injection" issue.
- Record
CVE-2012-0319- CVSS 2.0
- 6.5 Medium
AV:N/AC:L/Au:S/C:P/I:P/A:P - Weakness
- CWE-94
- Updated
- 2026-11-02
CVE ListNo score
The file-management system in Movable Type before 4.38, 5.0x before 5.07, and 5.1x before 5.13 allows remote authenticated users to execute arbitrary commands by leveraging the file-upload feature, related to an "OS Command Injection" issue.
- Record
CVE-2012-0319- Updated
- 2026-11-02
EUVDEUVD-2012-0355No score
The file-management system in Movable Type before 4.38, 5.0x before 5.07, and 5.1x before 5.13 allows remote authenticated users to execute arbitrary commands by leveraging the file-upload feature, related to an "OS Command Injection" issue.
- Record
EUVD-2012-0355- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-jg74-x32p-r6hvNo score
The file-management system in Movable Type before 4.38, 5.0x before 5.07, and 5.1x before 5.13...
The file-management system in Movable Type before 4.38, 5.0x before 5.07, and 5.1x before 5.13 allows remote authenticated users to execute arbitrary commands by leveraging the file-upload feature, related to an "OS Command Injection" issue.
- Record
GHSA-jg74-x32p-r6hv- Weakness
- CWE-94
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
movabletype.org/2012/02/movable_type_513_507_and_438_security_updates.html
jvndb.jvn.jp/jvndb/JVNDB-2012-000017
securityfocus.com/bid/52138
debian.org/security/2012/dsa-2423
securitytracker.com/id?1026738
jvn.jp/en/jp/JVN92683325/index.html
nvd.nist.gov/vuln/detail/CVE-2012-0319
github.com/advisories/GHSA-jg74-x32p-r6hv