GCVE - cpe:2.3:a:sixapart:movable_type:4.1:-:pro:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:sixapart:movable_type:4.1:-:pro:*:*:*:*:*

part: a version: 4.1 update: -

Vendor	Sixapart (`543b49bd-f8e0-5cde-b451-64c37d476b91`)
Product	Movable Type (`0b1b8903-7eaa-5490-a1bc-f063c17195fc`)
Edition	pro
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2009-2492`	vulnerable	2026-06-08 04:51:28.921030	Details available Cross-site scripting (XSS) vulnerability in mt-wizard.cgi in Six Apart Movable Type before 4.261 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2009-2480. Published: 2009-07-17T16:00:00.000Z Updated: 2024-08-07T05:52:14.767Z Open on db.gcve.eu Reference links http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000042.html http://www.securityfocus.com/bid/35885 http://jvn.jp/en/jp/JVN86472161/index.html http://secunia.com/advisories/35534 http://www.vupen.com/english/advisories/2009/1668	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-2481`	vulnerable	2026-06-08 04:51:28.829735	Details available mt-wizard.cgi in Six Apart Movable Type before 4.261, when global templates are not initialized, allows remote attackers to bypass access restrictions and (1) send e-mail to arbitrary addresses or (2) obtain sensitive information via unspecified vectors. Published: 2009-07-16T16:00:00.000Z Updated: 2024-08-07T05:52:14.744Z Open on db.gcve.eu Reference links http://jvn.jp/en/jp/JVN08369659/index.html http://secunia.com/advisories/35534 http://www.vupen.com/english/advisories/2009/1668 http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000043.html http://www.securityfocus.com/bid/35471	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-0752`	vulnerable	2026-06-08 04:51:11.094958	Details available Unspecified vulnerability in Movable Type Pro and Community Solution 4.x before 4.24 has unknown impact and attack vectors, possibly related to the password recovery mechanism. Published: 2009-03-03T00:00:00.000Z Updated: 2024-09-16T23:15:24.134Z Open on db.gcve.eu Reference links http://www.movabletype.com/blog/2009/02/movable-type-424-get-updated-with-better-password-recovery.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-6751`	not_vulnerable	2026-06-08 04:50:09.757534	Details available Cross-site scripting (XSS) vulnerability in the MailForm plugin before 1.20 for Movable Type allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Published: 2012-01-04T19:00:00.000Z Updated: 2024-08-07T16:18:20.595Z Open on db.gcve.eu Reference links http://jvn.jp/en/jp/JVN60887968/index.html https://exchange.xforce.ibmcloud.com/vulnerabilities/72344 http://www.h-fj.com/blog/archives/2007/01/23-111038.php http://jvndb.jvn.jp/en/contents/2011/JVNDB-2011-000108.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.