CVE-2008-4634

Cross-site scripting XSS vulnerability in Movable Type 4 through 4.21 allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to the administrative page, a different vulnerability than CVE-2008-4079...

CVE-2008-4634

Movable Type contains a cross-site scripting (XSS) vulnerability in MT 4.x (through 4.21, per initial CVE) and related Enterprise/Community variants, arising from improper handling of the administrative page. Exploitation may allow arbitrary script execution in the administrator’s browser. JVN en...