CVE-2006-5080

Cross-site scripting XSS vulnerability in the search function in Six Apart Movable Type 3.3 to 3.32, and Movable Type Enterprise 1.01 and 1.02, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2006-5080

CVE-2006-5080 is a cross-site scripting (XSS) vulnerability in Six Apart Movable Type up to version 3.32 (Movable Type 3.3–3.32) and Movable Type Enterprise up to 1.02, triggered through the search function. The underlying issue allows an attacker to inject arbitrary HTML/JavaScript via unspecifi...