CVE-2010-1985

2022-10-0316:21:00

mitre

www.cve.org

cve-2010-1985

cross-site scripting

administrative interface

5.8 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

62.3%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in the administrative user interface in Six Apart Movable Type 5.0 and 5.01 allow remote attackers to inject arbitrary web script or HTML via unknown vectors.

References

jvn.jp/en/jp/JVN92854093/index.html

jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000017.html

secunia.com/advisories/39741

www.movabletype.com/blog/2010/05/movable-type-502.html

www.movabletype.org/documentation/appendices/release-notes/movable-type-502.html

www.vupen.com/english/advisories/2010/1136