Movable Type
Approved changes feed: RSS · Atom
cpe:2.3:a:six_apart:movable_type:3.16:*:*:*:*:*:*:*part: a version: 3.16 update: *
| Vendor | Six Apart (4dce2138-356d-5ed1-b1c1-ce510ecb7ce8) |
|---|---|
| Product | Movable Type (72231f1a-cde5-5b0c-8469-c070220a27ec) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2009-2492 |
vulnerable | 2026-06-08 04:51:28.915456 |
Details available
Cross-site scripting (XSS) vulnerability in mt-wizard.cgi in Six Apart Movable Type before 4.261 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2009-2480.
Published: 2009-07-17T16:00:00.000Z
Updated: 2024-08-07T05:52:14.767Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-2481 |
vulnerable | 2026-06-08 04:51:28.803215 |
Details available
mt-wizard.cgi in Six Apart Movable Type before 4.261, when global templates are not initialized, allows remote attackers to bypass access restrictions and (1) send e-mail to arbitrary addresses or (2) obtain sensitive information via unspecified vectors.
Published: 2009-07-16T16:00:00.000Z
Updated: 2024-08-07T05:52:14.744Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-4690 |
vulnerable | 2026-06-08 04:48:44.747588 |
Details available
Six Apart Movable Type 3.16 allows local users with blog-creation privileges to create or overwrite arbitrary files of certain types (such as HTML and image files) by selecting an arbitrary directory as a blog's top-level directory. NOTE: this issue can be used in conjunction with CVE-2005-3102 to create or overwrite arbitrary files of all types.
Published: 2006-02-01T02:00:00.000Z
Updated: 2024-09-16T19:52:24.093Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-4689 |
not_vulnerable | 2026-06-08 04:48:44.747327 |
Details available
Six Apart Movable Type 3.16 stores account names and password hashes in a cookie, which allows remote attackers to login to an account by sniffing the cookie.
Published: 2006-02-01T02:00:00.000Z
Updated: 2024-09-16T17:42:47.535Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-3104 |
vulnerable | 2026-06-08 04:48:39.613164 |
Details available
mt-comments.cgi in Movable Type before 3.2 allows attackers to redirect users to other web sites via URLs in comments.
Published: 2005-09-28T04:00:00.000Z
Updated: 2024-08-07T23:01:59.311Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-3103 |
vulnerable | 2026-06-08 04:48:39.612906 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-3102 |
not_vulnerable | 2026-06-08 04:48:39.612573 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.