Lucene search

[email protected]CVE-2007-0604

HistoryJan 30, 2007 - 6:28 p.m.

CVE-2007-0604

2007-01-3018:28:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2007-0604

cross-site scripting

xss

movable type

vulnerability

web script

html

mtcommentpreviewisstatic

5.8 Medium

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.004 Low

EPSS

Percentile

72.0%

JSON

Cross-site scripting (XSS) vulnerability in Movable Type (MT) before 3.34 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the MTCommentPreviewIsStatic tag, which can open the “comment entry screen,” a different vulnerability than CVE-2007-0231.

CPENameOperatorVersion
six_apart_ltd:movable_typesix apart ltd movable typele3.33

CPE	Name	Operator	Version
six_apart_ltd:movable_type	six apart ltd movable type	le	3.33

References

osvdb.org/32987

www.sixapart.com/movabletype/beta/distros/MT-3.34-beta-Release-Notes.html

5.8 Medium

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.004 Low

EPSS

Percentile

72.0%

JSON

Related for CVE-2007-0604

prion3 securityvulns2 cve2