MT
Product
Movable Type
13
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 0
Watch
Add Movable Type to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2009-2492 | – | Jul 17 | Cross-site scripting (XSS) vulnerability in mt-wizard.cgi in Six Apart Movable Type before 4.261 allows remote attackers to inject arbitrary web script or HTML via unspecified… Affected: through 4.25; 1.54; 2.6; 2.63; 3.3; 3.16; +12 more |
| CVE-2009-2481 | – | Jul 16 | mt-wizard.cgi in Six Apart Movable Type before 4.261, when global templates are not initialized, allows remote attackers to bypass access restrictions and (1) send e-mail to… Affected: 1.54; 2.6; 2.63; 3.3; 3.16; 3.17; +8 more |
| CVE-2008-5808 | – | Jan 2 | Cross-site scripting (XSS) vulnerability in Six Apart Movable Type Enterprise (MTE) 1.x before 1.56; Movable Type (MT) 3.x before 3.38; and Movable Type, Movable Type Open Source… Affected: 4; 4; 4; 4.20; 4.20; 4.20 |
| CVE-2008-4634 | – | Oct 21 | Cross-site scripting (XSS) vulnerability in Movable Type 4 through 4.21 allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to the… Affected: 4; 4; 4; 4; 4.20; 4.20; +2 more |
| CVE-2008-4079 | – | Sep 15 | Cross-site scripting (XSS) vulnerability in Movable Type (MT) 4.x through 4.20, and 3.36 and earlier; Movable Type Enterprise 4.x through 4.20, and 1.54 and earlier; and Movable… Affected: through 1.54; 3.36; 4; 4; 4.20; 4.20; +1 more |
| CVE-2007-3342 | – | Jun 21 | Multiple cross-site scripting (XSS) vulnerabilities in Movable Type (MT) before 3.34 allow remote attackers to inject arbitrary web script or HTML via comments that have (1) a… Affected: through 3.33 |
| CVE-2007-0231 | – | Jan 13 | Cross-site scripting (XSS) vulnerability in Movable Type (MT) 3.33, when nofollow is disabled and unmoderated comments are enabled, allows remote attackers to inject arbitrary web… Affected: 3.33 |
| CVE-2006-5080 | – | Sep 29 | Cross-site scripting (XSS) vulnerability in the search function in Six Apart Movable Type 3.3 to 3.32, and Movable Type Enterprise 1.01 and 1.02, allows remote attackers to inject… Affected: 3.3; 3.32; enterprise_1.01; enterprise_1.02 |
| CVE-2005-4690 | – | Dec 31 | Six Apart Movable Type 3.16 allows local users with blog-creation privileges to create or overwrite arbitrary files of certain types (such as HTML and image files) by selecting an… Affected: 3.16 |
| CVE-2005-3104 | – | Sep 28 | mt-comments.cgi in Movable Type before 3.2 allows attackers to redirect users to other web sites via URLs in comments Affected: 3.16 |
| CVE-2005-3103 | – | Sep 28 | Cross-site scripting (XSS) vulnerability in Movable Type before 3.2 allows remote attackers to inject arbitrary web script or HTML via the (1) title, (2) category, (3) body, (4)… Affected: 3.16 |
| CVE-2005-3101 | – | Sep 28 | The password reset feature in Movable Type before 3.2 generates different error messages depending on whether a user exists or not, which allows remote attackers to determine… Affected: 3.17 |
| CVE-2003-0287 | – | Jun 16 | Cross-site scripting (XSS) vulnerability in Movable Type before 2.6, and possibly other versions including 2.63, allows remote attackers to insert arbitrary web script or HTML via… Affected: through 2.6; 2.63 |
Showing 13