Movable Type
Approved changes feed: RSS · Atom
cpe:2.3:a:six_apart:movable_type:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Six Apart (4dce2138-356d-5ed1-b1c1-ce510ecb7ce8) |
|---|---|
| Product | Movable Type (72231f1a-cde5-5b0c-8469-c070220a27ec) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2012-2644 |
not_vulnerable | 2026-06-08 05:02:05.124064 |
Details available
Cross-site scripting (XSS) vulnerability in the MT4i plugin 3.1 beta 4 and earlier for Movable Type allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2012-2642.
Published: 2012-07-07T10:00:00.000Z
Updated: 2024-09-16T20:12:48.139Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-2642 |
not_vulnerable | 2026-06-08 05:02:05.122131 |
Details available
Cross-site scripting (XSS) vulnerability in the MT4i plugin 3.1 beta 4 and earlier for Movable Type allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2012-2644.
Published: 2012-07-07T10:00:00.000Z
Updated: 2024-09-16T18:19:07.997Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-2676 |
not_vulnerable | 2026-06-08 04:58:08.373511 |
Details available
The A-Form and A-Form bamboo before 1.3.6 and 2.x before 2.0.3, and A-Form PC and PC/Mobile before 3.1, plug-ins for Movable Type do not require administrative authentication, which allows remote authenticated users to modify data via unspecified vectors.
Published: 2011-11-03T10:00:00.000Z
Updated: 2024-08-06T23:08:23.922Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-2492 |
vulnerable | 2026-06-08 04:51:28.915320 |
Details available
Cross-site scripting (XSS) vulnerability in mt-wizard.cgi in Six Apart Movable Type before 4.261 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2009-2480.
Published: 2009-07-17T16:00:00.000Z
Updated: 2024-08-07T05:52:14.767Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-3342 |
vulnerable | 2026-06-08 04:49:53.742197 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in Movable Type (MT) before 3.34 allow remote attackers to inject arbitrary web script or HTML via comments that have (1) a malformed SGML numeric character reference with a '\0' (0x00) character in a javascript: URI or (2) an attribute in an element that lacks the '>' character at the end of the start tag, a different vulnerability than CVE-2007-0231.
Published: 2007-06-21T23:00:00.000Z
Updated: 2024-08-07T14:14:13.088Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2003-0287 |
vulnerable | 2026-06-08 04:47:21.238718 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.