Approved changes feed: RSS · Atom

cpe:2.3:a:sixapart:movabletype:5.01:*:*:*:*:*:*:*

part: a version: 5.01 update: *

VendorSixapart (543b49bd-f8e0-5cde-b451-64c37d476b91)
ProductMovabletype (40d07dc6-77cf-517e-b21a-edb78c5ef1ab)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-0977 vulnerable 2026-06-08 05:05:15.350112 Details available
Cross-site scripting (XSS) vulnerability in the Rich Text Editor in Movable Type 5.0x, 5.1x before 5.161, 5.2.x before 5.2.9, and 6.0.x before 6.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2014-01-10T17:00:00.000Z
Updated: 2024-08-06T09:34:40.415Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4511 vulnerable 2026-06-08 04:56:28.777524 Details available
Unspecified vulnerability in Movable Type 4.x before 4.35 and 5.x before 5.04 has unknown impact and attack vectors related to the "dynamic publishing error message."
Published: 2010-12-09T19:00:00.000Z
Updated: 2024-08-07T03:51:17.931Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4509 vulnerable 2026-06-08 04:56:28.774115 Details available
Multiple unspecified vulnerabilities in Movable Type 4.x before 4.35 and 5.x before 5.04 have unknown impact and attack vectors related to the (1) mt:AssetProperty and (2) mt:EntryFlag tags.
Published: 2010-12-09T19:00:00.000Z
Updated: 2024-08-07T03:51:17.621Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3922 vulnerable 2026-06-08 04:55:17.989262 Details available
SQL injection vulnerability in Movable Type 4.x before 4.35 and 5.x before 5.04 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Published: 2010-12-09T19:00:00.000Z
Updated: 2024-08-07T03:26:12.224Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3921 vulnerable 2026-06-08 04:55:17.986345 Details available
Cross-site scripting (XSS) vulnerability in Movable Type 4.x before 4.35 and 5.x before 5.04 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2010-12-09T19:00:00.000Z
Updated: 2024-08-07T03:26:12.303Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.