Approved changes feed: RSS · Atom

cpe:2.3:a:sixapart:movable_type:4.2:-:community_solution:*:*:*:*:*

part: a version: 4.2 update: -

VendorSixapart (543b49bd-f8e0-5cde-b451-64c37d476b91)
ProductMovable Type (0b1b8903-7eaa-5490-a1bc-f063c17195fc)
Editioncommunity_solution
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-2492 vulnerable 2026-06-08 04:51:28.921116 Details available
Cross-site scripting (XSS) vulnerability in mt-wizard.cgi in Six Apart Movable Type before 4.261 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2009-2480.
Published: 2009-07-17T16:00:00.000Z
Updated: 2024-08-07T05:52:14.767Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2481 vulnerable 2026-06-08 04:51:28.832568 Details available
mt-wizard.cgi in Six Apart Movable Type before 4.261, when global templates are not initialized, allows remote attackers to bypass access restrictions and (1) send e-mail to arbitrary addresses or (2) obtain sensitive information via unspecified vectors.
Published: 2009-07-16T16:00:00.000Z
Updated: 2024-08-07T05:52:14.744Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0752 vulnerable 2026-06-08 04:51:11.097123 Details available
Unspecified vulnerability in Movable Type Pro and Community Solution 4.x before 4.24 has unknown impact and attack vectors, possibly related to the password recovery mechanism.
Published: 2009-03-03T00:00:00.000Z
Updated: 2024-09-16T23:15:24.134Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.