CVE-2005-3101

The password reset feature in Movable Type before 3.2 generates different error messages depending on whether a user exists or not, which allows remote attackers to determine valid usernames...

CVE-2005-3102

CVE-2005-4690 (Movable Type 3.16) : The Red Hat advisory describes that Movable Type 3.16 allows local users with blog-creation privileges to create or overwrite arbitrary files of certain types (e.g., HTML and images) by selecting an arbitrary directory as a blog’s top-level directory. This is s...

CVE-2005-3104

Movable Type

CVE-2005-3101

Movable Type prior to 3.2 exposes username enumeration via the password reset feature: authentication messages differ based on user existence, enabling remote attackers to determine valid usernames. No other details provided in the connected docs.

CVE-2005-3101: Undefined Security Weakness

The password reset feature in Movable Type before 3.2 generates different error messages depending on whether a user exists or not, which allows remote attackers to determine valid usernames...

CVE-2005-3104: Undefined Security Weakness

mt-comments.cgi in Movable Type before 3.2 allows attackers to redirect users to other web sites via URLs in comments...

CVE-2005-3103: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Movable Type before 3.2 allows remote attackers to inject arbitrary web script or HTML via the 1 title, 2 category, 3 body, 4 extended body, and 5 excerpt form fields in new blog entries...

CVE-2005-3102: Undefined Security Weakness

The administrative interface in Movable Type allows attackers to upload files with arbitrary extensions under the web root...

Movable Type < 3.2 Multiple Vulnerabilities

The version of Movable Type installed on the remote host is affected by multiple vulnerabilities : - The application allows an attacker to enumerate valid usernames because its password reset functionality returns different errors depending on whether the supplied username exists. CVE-2005-3101 -...

Movable Type < 3.20 Multiple Vulnerabilities

Binary data 3237.prm...

JVN#74012178 Movable Type session management vulnerability

Impact A remote attacker could freely manipulate a web log by posting or deleting blog entries. Solution Products Affected Movable Type 3.151-ja and earlier...

Movable Type mt-load.cgi Privilege Escalation

The remote web server is hosting Movable Type with 'mt-load.cgi' installed. Failure to remove mt-load.cgi could enable someone else to create a weblog in your Movable Type installation, and possibly gain access to your data. %NASLMINLEVEL 70300 This script was written by Rich Walchuck rich.walchu...

Movable Type mt.cfg Information Disclosure

The remote host is running Movable Type. The file 'mt.cfg' is publicly accessible, and contains information that should not be exposed. %NASLMINLEVEL 70300 This script was written by Rich Walchuck rich.walchuck at gmail.com See the Nessus Scripts License for details Changes by Tenable: -...

Movable Type < 4.26 Multiple Vulnerabilities

Binary data 5088.prm...

CVE-2003-0287

Cross-site scripting XSS vulnerability in Movable Type before 2.6, and possibly other versions including 2.63, allows remote attackers to insert arbitrary web script or HTML via the Name textbox, possibly when the "Allow HTML in comments?" option is enabled...

CVE-2003-0287

Cross-site scripting XSS vulnerability in Movable Type before 2.6, and possibly other versions including 2.63, allows remote attackers to insert arbitrary web script or HTML via the Name textbox, possibly when the "Allow HTML in comments?" option is enabled...

CVE-2003-0287

CVE-2003-0287 describes a cross-site scripting (XSS) vulnerability in Movable Type prior to 2.6, and possibly other versions including 2.63. An attacker could inject arbitrary script or HTML via the Name textbox, potentially when the "Allow HTML in comments?" option is enabled. The connected reco...

CVE-2003-0287: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Movable Type before 2.6, and possibly other versions including 2.63, allows remote attackers to insert arbitrary web script or HTML via the Name textbox, possibly when the "Allow HTML in comments?" option is enabled...

CSS found in Movable Type

Summary: Movable Type is a decentralized web-based personal publishing system designed to ease maintenance of regularly-updated content. This content can consist of, but is not limited to, entries in a weblog or online journal, photographs in an online photo gallery, news headlines on a newspaper...