GCVE - cpe:2.3:a:six_apart:movable_type:4.20:*:community

Approved changes feed: RSS · Atom

cpe:2.3:a:six_apart:movable_type:4.20:*:community_solution:*:*:*:*:*

part: a version: 4.20 update: *

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2009-2492`	vulnerable	2026-06-08 04:51:28.918643	Details available Cross-site scripting (XSS) vulnerability in mt-wizard.cgi in Six Apart Movable Type before 4.261 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2009-2480. Published: 2009-07-17T16:00:00.000Z Updated: 2024-08-07T05:52:14.767Z Open on db.gcve.eu Reference links http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000042.html http://www.securityfocus.com/bid/35885 http://jvn.jp/en/jp/JVN86472161/index.html http://secunia.com/advisories/35534 http://www.vupen.com/english/advisories/2009/1668	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-2481`	vulnerable	2026-06-08 04:51:28.808603	Details available mt-wizard.cgi in Six Apart Movable Type before 4.261, when global templates are not initialized, allows remote attackers to bypass access restrictions and (1) send e-mail to arbitrary addresses or (2) obtain sensitive information via unspecified vectors. Published: 2009-07-16T16:00:00.000Z Updated: 2024-08-07T05:52:14.744Z Open on db.gcve.eu Reference links http://jvn.jp/en/jp/JVN08369659/index.html http://secunia.com/advisories/35534 http://www.vupen.com/english/advisories/2009/1668 http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000043.html http://www.securityfocus.com/bid/35471	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.