GCVE - cpe:2.3:a:sixapart:movable_type:3.34:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:sixapart:movable_type:3.34:*:*:*:*:*:*:*

part: a version: 3.34 update: *

Vendor	Sixapart (`543b49bd-f8e0-5cde-b451-64c37d476b91`)
Product	Movable Type (`0b1b8903-7eaa-5490-a1bc-f063c17195fc`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2009-2492`	vulnerable	2026-06-08 04:51:28.920923	Details available Cross-site scripting (XSS) vulnerability in mt-wizard.cgi in Six Apart Movable Type before 4.261 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2009-2480. Published: 2009-07-17T16:00:00.000Z Updated: 2024-08-07T05:52:14.767Z Open on db.gcve.eu Reference links http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000042.html http://www.securityfocus.com/bid/35885 http://jvn.jp/en/jp/JVN86472161/index.html http://secunia.com/advisories/35534 http://www.vupen.com/english/advisories/2009/1668	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-2481`	vulnerable	2026-06-08 04:51:28.826137	Details available mt-wizard.cgi in Six Apart Movable Type before 4.261, when global templates are not initialized, allows remote attackers to bypass access restrictions and (1) send e-mail to arbitrary addresses or (2) obtain sensitive information via unspecified vectors. Published: 2009-07-16T16:00:00.000Z Updated: 2024-08-07T05:52:14.744Z Open on db.gcve.eu Reference links http://jvn.jp/en/jp/JVN08369659/index.html http://secunia.com/advisories/35534 http://www.vupen.com/english/advisories/2009/1668 http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000043.html http://www.securityfocus.com/bid/35471	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-5846`	vulnerable	2026-06-08 04:50:53.327770	Details available Six Apart Movable Type (MT) before 4.23 allows remote authenticated users with create permission for posts to bypass intended access restrictions and publish posts via a "system-wide entry listing screen." Published: 2009-01-05T20:00:00.000Z Updated: 2024-08-07T11:04:44.790Z Open on db.gcve.eu Reference links http://www.movabletype.org/mt_423_change_log.html http://www.securityfocus.com/bid/33133 https://exchange.xforce.ibmcloud.com/vulnerabilities/47759	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-5845`	vulnerable	2026-06-08 04:50:53.324905	Details available Multiple cross-site scripting (XSS) vulnerabilities in Six Apart Movable Type (MT) before 4.23 allow remote attackers to inject arbitrary web script or HTML via a (1) MTEntryAuthorUsername, (2) MTAuthorDisplayName, (3) MTEntryAuthorDisplayName, or (4) MTCommenterName field in a Profile View template; a (5) listing screen or (6) edit screen in the CMS app; (7) a TrackBack title, related to the HTML sanitization library; or (8) a user archive name (aka archive title) on a published Community Blog template. Published: 2009-01-05T20:00:00.000Z Updated: 2024-08-07T11:04:44.694Z Open on db.gcve.eu Reference links http://jvn.jp/en/jp/JVN45658190/index.html http://www.movabletype.org/mt_423_change_log.html http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000031.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-5808`	vulnerable	2026-06-08 04:50:53.178962	Details available Cross-site scripting (XSS) vulnerability in Six Apart Movable Type Enterprise (MTE) 1.x before 1.56; Movable Type (MT) 3.x before 3.38; and Movable Type, Movable Type Open Source (MTOS), and Movable Type Enterprise 4.x before 4.23 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly related to "application management." Published: 2009-01-02T18:00:00.000Z Updated: 2024-08-07T11:04:44.600Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/47019 http://www.securityfocus.com/bid/32604 http://jvndb.jvn.jp/en/contents/2008/JVNDB-2008-000067.html http://secunia.com/advisories/32935 http://jvn.jp/en/jp/JVN02216739/index.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.