Six Apart Movable Type Multiple Vulnerabilities (Apr 2011)

Six Apart Movable Type is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:sixapart:movabletype...

CVE-2010-4509

Multiple unspecified vulnerabilities in Movable Type 4.x before 4.35 and 5.x before 5.04 have unknown impact and attack vectors related to the 1 mt:AssetProperty and 2 mt:EntryFlag tags...

CVE-2010-3922

SQL injection vulnerability in Movable Type 4.x before 4.35 and 5.x before 5.04 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2010-4511

Unspecified vulnerability in Movable Type 4.x before 4.35 and 5.x before 5.04 has unknown impact and attack vectors related to the "dynamic publishing error message."...

CVE-2010-3921

Cross-site scripting XSS vulnerability in Movable Type 4.x before 4.35 and 5.x before 5.04 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Design/Logic Flaw

Multiple unspecified vulnerabilities in Movable Type 4.x before 4.35 and 5.x before 5.04 have unknown impact and attack vectors related to the 1 mt:AssetProperty and 2 mt:EntryFlag tags...

Sql injection

Unspecified vulnerability in Movable Type 4.x before 4.35 and 5.x before 5.04 has unknown impact and attack vectors related to the "dynamic publishing error message."...

CVE-2010-3922

SQL injection vulnerability in Movable Type 4.x before 4.35 and 5.x before 5.04 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2010-4509

Multiple unspecified vulnerabilities in Movable Type 4.x before 4.35 and 5.x before 5.04 have unknown impact and attack vectors related to the 1 mt:AssetProperty and 2 mt:EntryFlag tags...

CVE-2010-3921

Cross-site scripting XSS vulnerability in Movable Type 4.x before 4.35 and 5.x before 5.04 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2010-4511

Unspecified vulnerability in Movable Type 4.x before 4.35 and 5.x before 5.04 has unknown impact and attack vectors related to the "dynamic publishing error message."...

Cross site scripting

Cross-site scripting XSS vulnerability in Movable Type 4.x before 4.35 and 5.x before 5.04 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Sql injection

SQL injection vulnerability in Movable Type 4.x before 4.35 and 5.x before 5.04 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2010-3921

Cross-site scripting XSS vulnerability in Movable Type 4.x before 4.35 and 5.x before 5.04 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2010-3921

Summary of CVE-2010-3921 (Movable Type XSS) Affected product family: Movable Type (Six Apart). The vulnerability is a cross-site scripting (XSS) issue reported for Movable Type 4.x before 4.35 and 5.x before 5.04, allowing remote attackers to inject arbitrary script or HTML in the victim’s browse...

CVE-2010-4509

Movable Type is affected by multiple vulnerabilities in the mt:AssetProperty and mt:EntryFlag tags affecting Movable Type 4.x before 4.35 and 5.x before 5.04. The connected documents corroborate affected versions and tag-level vectors without detailing exact exploit paths or impacts, describing t...

CVE-2010-3922

CVE-2010-3922 affects Movable Type: SQL injection in Movable Type 4.x before 4.35 and 5.x before 5.04 that allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Documented sources confirm vulnerable product versions and impact (remote data view/ modification). Availab...

CVE-2010-4509

Multiple unspecified vulnerabilities in Movable Type 4.x before 4.35 and 5.x before 5.04 have unknown impact and attack vectors related to the 1 mt:AssetProperty and 2 mt:EntryFlag tags...

CVE-2010-4511

CVE-2010-4511 affects Six Apart Movable Type. Affected: Movable Type 4.x before 4.35 and 5.x before 5.04. Issue tied to dynamic publishing error messages; root cause not detailed in provided docs. Consequences per NVD: high impact with network attack vector and complete impacts to confidentiality...

CVE-2010-4511

Unspecified vulnerability in Movable Type 4.x before 4.35 and 5.x before 5.04 has unknown impact and attack vectors related to the "dynamic publishing error message."...