GCVE - cpe:2.3:a:six_apart:movable_type:3.32:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:six_apart:movable_type:3.32:*:*:*:*:*:*:*

part: a version: 3.32 update: *

Vendor	Six Apart (`4dce2138-356d-5ed1-b1c1-ce510ecb7ce8`)
Product	Movable Type (`72231f1a-cde5-5b0c-8469-c070220a27ec`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2009-2492`	vulnerable	2026-06-08 04:51:28.915492	Details available Cross-site scripting (XSS) vulnerability in mt-wizard.cgi in Six Apart Movable Type before 4.261 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2009-2480. Published: 2009-07-17T16:00:00.000Z Updated: 2024-08-07T05:52:14.767Z Open on db.gcve.eu Reference links http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000042.html http://www.securityfocus.com/bid/35885 http://jvn.jp/en/jp/JVN86472161/index.html http://secunia.com/advisories/35534 http://www.vupen.com/english/advisories/2009/1668	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-2481`	vulnerable	2026-06-08 04:51:28.804815	Details available mt-wizard.cgi in Six Apart Movable Type before 4.261, when global templates are not initialized, allows remote attackers to bypass access restrictions and (1) send e-mail to arbitrary addresses or (2) obtain sensitive information via unspecified vectors. Published: 2009-07-16T16:00:00.000Z Updated: 2024-08-07T05:52:14.744Z Open on db.gcve.eu Reference links http://jvn.jp/en/jp/JVN08369659/index.html http://secunia.com/advisories/35534 http://www.vupen.com/english/advisories/2009/1668 http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000043.html http://www.securityfocus.com/bid/35471	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-5080`	vulnerable	2026-06-08 04:49:19.644557	Details available Cross-site scripting (XSS) vulnerability in the search function in Six Apart Movable Type 3.3 to 3.32, and Movable Type Enterprise 1.01 and 1.02, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Published: 2006-09-29T00:00:00.000Z Updated: 2024-08-07T19:41:03.999Z Open on db.gcve.eu Reference links http://jvn.jp/jp/JVN%2368295640/index.html https://exchange.xforce.ibmcloud.com/vulnerabilities/29183 http://www.osvdb.org/29177 http://secunia.com/advisories/22109 http://www.vupen.com/english/advisories/2006/3779	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Movable Type

Notes

PURL mappings

Vulnerability references

Contribute