CVE-2006-5080: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the search function in Six Apart Movable Type 3.3 to 3.32, and Movable Type Enterprise 1.01 and 1.02, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2006-5080

Cross-site scripting XSS vulnerability in the search function in Six Apart Movable Type 3.3 to 3.32, and Movable Type Enterprise 1.01 and 1.02, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2006-5080

CVE-2006-5080 is a cross-site scripting (XSS) vulnerability in Six Apart Movable Type up to version 3.32 (Movable Type 3.3–3.32) and Movable Type Enterprise up to 1.02, triggered through the search function. The underlying issue allows an attacker to inject arbitrary HTML/JavaScript via unspecifi...

JVN#68295640 Movable Type vulnerabile to cross-site scripting

Impact An arbitrary script may be executed on the user's web browser. In addition, if session information from a cookie is leaked, session hijacking could be conducted. Solution Products Affected Movable Type 3.3, 3.31, 3.32 Movable Type Enterprise 1.01, 1.02 For more information, refer to the...

MT -- Search Unspecified XSS

Secunia reports: Arai has reported a vulnerability in Movable Type and Movable Type Enterprise, which can be exploited by malicious people to conduct cross-site scripting attacks. Some unspecified input passed via the search functionality isn't properly sanitised before being returned to the user...

JVN#10222000 QUICK CART OS command injection vulnerability

Impact A remote attacker could execute arbitrary operating system commands on a server running QUICK CART. Solution Products Affected QUICK CART Ver 1 QUICK CART Ver 2 QUICK CART Free QUICK CART Pro QUICK CART Plugin for Movable Type 3.2...

JVN#68630618 QUICK CART cross-site scripting vulnerability

Impact An arbitrary script could be executed on the user's web browser. Solution Products Affected QUICK CART Ver 1 QUICK CART Ver 2 QUICK CART Free QUICK CART Pro QUICK CART Plugin for Movable Type 3.2...

CVE-2005-4690

Six Apart Movable Type 3.16 allows local users with blog-creation privileges to create or overwrite arbitrary files of certain types such as HTML and image files by selecting an arbitrary directory as a blog's top-level directory. NOTE: this issue can be used in conjunction with CVE-2005-3102 to...

CVE-2005-4689

Six Apart Movable Type 3.16 stores account names and password hashes in a cookie, which allows remote attackers to login to an account by sniffing the cookie...

CVE-2005-4690

CVE-2005-4690 relates to Six Apart Movable Type 3.16, where local users with blog-creation privileges can create or overwrite arbitrary files (e.g., HTML and image files) by selecting an arbitrary directory as the blog’s top-level directory. Note that this issue can be exploited in conjunction wi...

CVE-2005-4689

CVE-2005-4689 concerns Six Apart Movable Type 3.16, where account names and password hashes are stored in a cookie. The underlying vulnerability is credential exposure via the cookie, enabling a remote attacker to log in to an account by sniffing that cookie. The connected documents confirm the a...

CVE-2005-4690: Undefined Security Weakness

Six Apart Movable Type 3.16 allows local users with blog-creation privileges to create or overwrite arbitrary files of certain types such as HTML and image files by selecting an arbitrary directory as a blog's top-level directory. NOTE: this issue can be used in conjunction with CVE-2005-3102 to...

CVE-2005-4689: Undefined Security Weakness

Six Apart Movable Type 3.16 stores account names and password hashes in a cookie, which allows remote attackers to login to an account by sniffing the cookie...

CVE-2005-4690

Six Apart Movable Type 3.16 allows local users with blog-creation privileges to create or overwrite arbitrary files of certain types such as HTML and image files by selecting an arbitrary directory as a blog's top-level directory. NOTE: this issue can be used in conjunction with CVE-2005-3102 to...

CVE-2005-4689

Six Apart Movable Type 3.16 stores account names and password hashes in a cookie, which allows remote attackers to login to an account by sniffing the cookie...

Xss в Movable Type

Продукт:Movable Type Версия:3.2b3 Опасность:Низкая Тип уязвимости:Межсайтовый скриптинг Описание:Недостаточная фильтрация входящих параметров. Пример:www.target.com/cgi-bin/mt/mt.cgi?mode=view&type=entry&id=1223E3Cscript3Ealert3C/script3E&blogid=1...

[Full-disclosure] Buggy blogging

Portcullis Security Advisory Tim Brown [email protected] - www.portcullis-security.com [email protected] - www.nth-dimension.org.uk Vulnerable System: Movable Type Vulnerability Title: Username and password hash for administration interface stored in cookie. Vulnerability...

Movable Type config file

/mt/mt.cfg is installed by the Movable Type Publishing Platform and contains information that should not be exposed. OpenVAS Vulnerability Test $Id: movabletypecfg.nasl 6053 2017-05-01 09:02:51Z teissa $ Description: Movable Type config file Authors: Rich Walchuck rich.walchuck at gmail.com...

Movable Type Config File Disclosure Vulnerability - Active Check

/mt/mt.cfg is installed by the Movable Type Publishing Platform and contains information that should not be exposed. SPDX-FileCopyrightText: 2004 Rich Walchuck Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Movable Type Initialization Script Disclosure Vulnerability - Active Check

mt-load.cgi is installed by the Movable Type Publishing Platform. SPDX-FileCopyrightText: 2004 Rich Walchuck Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...