Movable Type config file

/mt/mt.cfg is installed by the Movable Type Publishing Platform and contains information that should not be exposed. OpenVAS Vulnerability Test $Id: movabletypecfg.nasl 6053 2017-05-01 09:02:51Z teissa $ Description: Movable Type config file Authors: Rich Walchuck rich.walchuck at gmail.com...

Movable Type Config File Disclosure Vulnerability - Active Check

/mt/mt.cfg is installed by the Movable Type Publishing Platform and contains information that should not be exposed. SPDX-FileCopyrightText: 2004 Rich Walchuck Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Movable Type Initialization Script Disclosure Vulnerability - Active Check

mt-load.cgi is installed by the Movable Type Publishing Platform. SPDX-FileCopyrightText: 2004 Rich Walchuck Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2005-3103

Cross-site scripting XSS vulnerability in Movable Type before 3.2 allows remote attackers to inject arbitrary web script or HTML via the 1 title, 2 category, 3 body, 4 extended body, and 5 excerpt form fields in new blog entries...

CVE-2005-3104

mt-comments.cgi in Movable Type before 3.2 allows attackers to redirect users to other web sites via URLs in comments...

CVE-2005-3102

The administrative interface in Movable Type allows attackers to upload files with arbitrary extensions under the web root...

CVE-2005-3101

The password reset feature in Movable Type before 3.2 generates different error messages depending on whether a user exists or not, which allows remote attackers to determine valid usernames...

CVE-2005-3104

Movable Type

CVE-2005-3103

Summary: CVE-2005-3103 is an XSS vulnerability in Movable Type prior to 3.2. The issue allows remote attackers to inject arbitrary web script or HTML via multiple form fields (title, category, body, extended body, excerpt) when creating new blog entries. The provided description notes it as a cro...

CVE-2005-3103

Cross-site scripting XSS vulnerability in Movable Type before 3.2 allows remote attackers to inject arbitrary web script or HTML via the 1 title, 2 category, 3 body, 4 extended body, and 5 excerpt form fields in new blog entries...

CVE-2005-3102

The administrative interface in Movable Type allows attackers to upload files with arbitrary extensions under the web root...

CVE-2005-3101

The password reset feature in Movable Type before 3.2 generates different error messages depending on whether a user exists or not, which allows remote attackers to determine valid usernames...

CVE-2005-3102

CVE-2005-4690 (Movable Type 3.16) : The Red Hat advisory describes that Movable Type 3.16 allows local users with blog-creation privileges to create or overwrite arbitrary files of certain types (e.g., HTML and images) by selecting an arbitrary directory as a blog’s top-level directory. This is s...

CVE-2005-3101

Movable Type prior to 3.2 exposes username enumeration via the password reset feature: authentication messages differ based on user existence, enabling remote attackers to determine valid usernames. No other details provided in the connected docs.

CVE-2005-3104

mt-comments.cgi in Movable Type before 3.2 allows attackers to redirect users to other web sites via URLs in comments...

Movable Type < 3.2 Multiple Vulnerabilities

The version of Movable Type installed on the remote host is affected by multiple vulnerabilities : - The application allows an attacker to enumerate valid usernames because its password reset functionality returns different errors depending on whether the supplied username exists. CVE-2005-3101 -...

Movable Type < 3.20 Multiple Vulnerabilities

Binary data 3237.prm...

JVN#74012178 Movable Type session management vulnerability

Impact A remote attacker could freely manipulate a web log by posting or deleting blog entries. Solution Products Affected Movable Type 3.151-ja and earlier...

Movable Type mt-load.cgi Privilege Escalation

The remote web server is hosting Movable Type with 'mt-load.cgi' installed. Failure to remove mt-load.cgi could enable someone else to create a weblog in your Movable Type installation, and possibly gain access to your data. %NASLMINLEVEL 70300 This script was written by Rich Walchuck rich.walchu...

Movable Type mt.cfg Information Disclosure

The remote host is running Movable Type. The file 'mt.cfg' is publicly accessible, and contains information that should not be exposed. %NASLMINLEVEL 70300 This script was written by Rich Walchuck rich.walchuck at gmail.com See the Nessus Scripts License for details Changes by Tenable: -...