Lucene search

[email protected]CVE-2008-5808

HistoryJan 02, 2009 - 6:11 p.m.

CVE-2008-5808

2009-01-0218:11:00

CWE-79

[email protected]

web.nvd.nist.gov

cve-2008-5808

cross-site scripting

xss

six apart

movable type

enterprise

mte

movable type

mtos

web script

html

application management

security vulnerability

nvd

6 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

65.0%

JSON

Cross-site scripting (XSS) vulnerability in Six Apart Movable Type Enterprise (MTE) 1.x before 1.56; Movable Type (MT) 3.x before 3.38; and Movable Type, Movable Type Open Source (MTOS), and Movable Type Enterprise 4.x before 4.23 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly related to “application management.”

CPENameOperatorVersion
six_apart:movable_typesix apart movable typeeq4.20
sixapart:movable_typesixapart movable typeeq3.15
sixapart:movable_typesixapart movable typeeq3.2
sixapart:movable_typesixapart movable typeeq3.32
sixapart:movable_typesixapart movable typeeq3.16
sixapart:movable_typesixapart movable typeeq1.5
sixapart:movable_typesixapart movable typeeq3.1
six_apart:movable_typesix apart movable typeeq4
sixapart:movable_typesixapart movable typeeq1.00
sixapart:movable_typesixapart movable typeeq3.33

CPE	Name	Operator	Version
six_apart:movable_type	six apart movable type	eq	4.20
sixapart:movable_type	sixapart movable type	eq	3.15
sixapart:movable_type	sixapart movable type	eq	3.2
sixapart:movable_type	sixapart movable type	eq	3.32
sixapart:movable_type	sixapart movable type	eq	3.16
sixapart:movable_type	sixapart movable type	eq	1.5
sixapart:movable_type	sixapart movable type	eq	3.1
six_apart:movable_type	six apart movable type	eq	4
sixapart:movable_type	sixapart movable type	eq	1.00
sixapart:movable_type	sixapart movable type	eq	3.33

Rows per page:

1-10 of 241

References

jvn.jp/en/jp/JVN02216739/index.html

jvndb.jvn.jp/en/contents/2008/JVNDB-2008-000067.html

secunia.com/advisories/32935

www.movabletype.jp/blog/_movable_type_423.html

www.securityfocus.com/bid/32604

exchange.xforce.ibmcloud.com/vulnerabilities/47019

6 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

65.0%

JSON

Related for CVE-2008-5808

cvelist1 ubuntucve1 prion1 jvn1