SA
Vendor
Six Apart
13
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2009-2492 | MT Movable Type Six Apart | – | Jul 17 | Cross-site scripting (XSS) vulnerability in mt-wizard.cgi in Six Apart Movable Type before 4.261 allows remote attackers to inject arbitrary web script or HTML via unspecified… |
| CVE-2009-2481 | MT Movable Type Six Apart | – | Jul 16 | mt-wizard.cgi in Six Apart Movable Type before 4.261, when global templates are not initialized, allows remote attackers to bypass access restrictions and (1) send e-mail to… |
| CVE-2008-5808 | MT Movable Type Six Apart | – | Jan 2 | Cross-site scripting (XSS) vulnerability in Six Apart Movable Type Enterprise (MTE) 1.x before 1.56; Movable Type (MT) 3.x before 3.38; and Movable Type, Movable Type Open Source… |
| CVE-2008-4634 | MT Movable Type Six Apart | – | Oct 21 | Cross-site scripting (XSS) vulnerability in Movable Type 4 through 4.21 allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to the… |
| CVE-2008-4079 | MT Movable Type Six Apart | – | Sep 15 | Cross-site scripting (XSS) vulnerability in Movable Type (MT) 4.x through 4.20, and 3.36 and earlier; Movable Type Enterprise 4.x through 4.20, and 1.54 and earlier; and Movable… |
| CVE-2007-3342 | MT Movable Type Six Apart | – | Jun 21 | Multiple cross-site scripting (XSS) vulnerabilities in Movable Type (MT) before 3.34 allow remote attackers to inject arbitrary web script or HTML via comments that have (1) a… |
| CVE-2007-0231 | MT Movable Type Six Apart | – | Jan 13 | Cross-site scripting (XSS) vulnerability in Movable Type (MT) 3.33, when nofollow is disabled and unmoderated comments are enabled, allows remote attackers to inject arbitrary web… |
| CVE-2006-5080 | MT Movable Type Six Apart | – | Sep 29 | Cross-site scripting (XSS) vulnerability in the search function in Six Apart Movable Type 3.3 to 3.32, and Movable Type Enterprise 1.01 and 1.02, allows remote attackers to inject… |
| CVE-2005-4690 | MT Movable Type Six Apart | – | Dec 31 | Six Apart Movable Type 3.16 allows local users with blog-creation privileges to create or overwrite arbitrary files of certain types (such as HTML and image files) by selecting an… |
| CVE-2005-3104 | MT Movable Type Six Apart | – | Sep 28 | mt-comments.cgi in Movable Type before 3.2 allows attackers to redirect users to other web sites via URLs in comments |
| CVE-2005-3103 | MT Movable Type Six Apart | – | Sep 28 | Cross-site scripting (XSS) vulnerability in Movable Type before 3.2 allows remote attackers to inject arbitrary web script or HTML via the (1) title, (2) category, (3) body, (4)… |
| CVE-2005-3101 | MT Movable Type Six Apart | – | Sep 28 | The password reset feature in Movable Type before 3.2 generates different error messages depending on whether a user exists or not, which allows remote attackers to determine… |
| CVE-2003-0287 | MT Movable Type Six Apart | – | Jun 16 | Cross-site scripting (XSS) vulnerability in Movable Type before 2.6, and possibly other versions including 2.63, allows remote attackers to insert arbitrary web script or HTML via… |