CVE-2008-5845

CVE-2008-5845 affects Six Apart Movable Type before 4.23, with multiple XSS vulnerabilities in the management/UI templates (Profile View, listing/edit screens, TrackBack title, archive title) related to the HTML sanitization library. The connected sources (JVN entries) identify Movable Type 4.21 ...

CVE-2008-5845

Multiple cross-site scripting XSS vulnerabilities in Six Apart Movable Type MT before 4.23 allow remote attackers to inject arbitrary web script or HTML via a 1 MTEntryAuthorUsername, 2 MTAuthorDisplayName, 3 MTEntryAuthorDisplayName, or 4 MTCommenterName field in a Profile View template; a 5...

CVE-2008-5846

Six Apart Movable Type MT before 4.23 allows remote authenticated users with create permission for posts to bypass intended access restrictions and publish posts via a "system-wide entry listing screen."...

CVE-2008-5846

Six Apart Movable Type (MT)

CVE-2008-5845: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Six Apart Movable Type MT before 4.23 allow remote attackers to inject arbitrary web script or HTML via a 1 MTEntryAuthorUsername, 2 MTAuthorDisplayName, 3 MTEntryAuthorDisplayName, or 4 MTCommenterName field in a Profile View template; a 5...

CVE-2008-5846: Undefined Security Weakness

Six Apart Movable Type MT before 4.23 allows remote authenticated users with create permission for posts to bypass intended access restrictions and publish posts via a "system-wide entry listing screen."...

CVE-2008-5808

Cross-site scripting XSS vulnerability in Six Apart Movable Type Enterprise MTE 1.x before 1.56; Movable Type MT 3.x before 3.38; and Movable Type, Movable Type Open Source MTOS, and Movable Type Enterprise 4.x before 4.23 allows remote attackers to inject arbitrary web script or HTML via...

CVE-2008-5808

Cross-site scripting XSS vulnerability in Six Apart Movable Type Enterprise MTE 1.x before 1.56; Movable Type MT 3.x before 3.38; and Movable Type, Movable Type Open Source MTOS, and Movable Type Enterprise 4.x before 4.23 allows remote attackers to inject arbitrary web script or HTML via...

Cross site scripting

Cross-site scripting XSS vulnerability in Six Apart Movable Type Enterprise MTE 1.x before 1.56; Movable Type MT 3.x before 3.38; and Movable Type, Movable Type Open Source MTOS, and Movable Type Enterprise 4.x before 4.23 allows remote attackers to inject arbitrary web script or HTML via...

CVE-2008-5808

Cross-site scripting XSS vulnerability in Six Apart Movable Type Enterprise MTE 1.x before 1.56; Movable Type MT 3.x before 3.38; and Movable Type, Movable Type Open Source MTOS, and Movable Type Enterprise 4.x before 4.23 allows remote attackers to inject arbitrary web script or HTML via...

CVE-2008-5808

CVE-2008-5808 is an XSS vulnerability in Six Apart Movable Type products: Movable Type Enterprise (MTE) 1.x before 1.56, Movable Type (MT) 3.x before 3.38, and MTOS/Movable Type Enterprise 4.x before 4.23. The root cause is a cross-site scripting flaw that allows remote attackers to inject arbitr...

CVE-2008-5808: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Six Apart Movable Type Enterprise MTE 1.x before 1.56; Movable Type MT 3.x before 3.38; and Movable Type, Movable Type Open Source MTOS, and Movable Type Enterprise 4.x before 4.23 allows remote attackers to inject arbitrary web script or HTML via...

Movable Type Enterprise cross-site scripting vulnerability

Overview Movable Type Enterprise contains a cross-site scripting vulnerability. Movable Type Enterprise, a web log system from Six Apart KK for business users, contains a cross-site scripting vulnerability. This vulnerability is different from JVN30385652 and JVN81490697. Yosuke HASEGAWA of...

JVN#02216739 Movable Type Enterprise cross-site scripting vulnerability

Movable Type Enterprise, a web log system from Six Apart KK for business users, contains a cross-site scripting vulnerability. This vulnerability is different from JVN30385652 and JVN81490697. Impact An arbitrary script may be executed on an user's web browser. Solution Update the Software Update...

Movable Type cross-site scripting vulnerability

Overview Movable Type contains a cross-site scripting vulnerability. Movable Type, a web log system from Six Apart KK, contains a vulnerability resulting from the improper handling of the management page that can lead to cross-site scripting. This vulnerability is different from JVN30385652. An...

CVE-2008-4634

Cross-site scripting XSS vulnerability in Movable Type 4 through 4.21 allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to the administrative page, a different vulnerability than CVE-2008-4079...

Cross site scripting

Cross-site scripting XSS vulnerability in Movable Type 4 through 4.21 allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to the administrative page, a different vulnerability than CVE-2008-4079...

CVE-2008-4634

Cross-site scripting XSS vulnerability in Movable Type 4 through 4.21 allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to the administrative page, a different vulnerability than CVE-2008-4079...

CVE-2008-4634

Cross-site scripting XSS vulnerability in Movable Type 4 through 4.21 allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to the administrative page, a different vulnerability than CVE-2008-4079...

CVE-2008-4634: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Movable Type 4 through 4.21 allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to the administrative page, a different vulnerability than CVE-2008-4079...