CVSS: 10.0EPSS: 0%CPEs: 17EXPL: 0CVE-2010-4509
https://notcve.org/view.php?id=CVE-2010-4509
Multiple unspecified vulnerabilities in Movable Type 4.x before 4.35 and 5.x before 5.04 have unknown impact and attack vectors related to the (1) mt:AssetProperty and (2) mt:EntryFlag tags. Multiples vulnerabilidades no especificadas en Movable Type v4.x anterior v4.35 y v5.x anterior v5.04 produce un impacto desconocido y ataque a vectores relacionado con la etiqueta (1) mt:AssetProperty and (2) mt:EntryFlag. • http://www.movabletype.org/documentation/appendices/release-notes/movable-type-504-435-release-notes.html http://www.securityfocus.com/bid/45383 https://exchange.xforce.ibmcloud.com/vulnerabilities/64130 •
CVSS: 4.3EPSS: 0%CPEs: 2EXPL: 0CVE-2010-1985
https://notcve.org/view.php?id=CVE-2010-1985
Multiple cross-site scripting (XSS) vulnerabilities in the administrative user interface in Six Apart Movable Type 5.0 and 5.01 allow remote attackers to inject arbitrary web script or HTML via unknown vectors. Multiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados (XSS) en la interfaz de usuario administrativa en Six Apart Movable Type v5.0 y v5.01 permite a atacantes remotos inyectar código web o HTML de su elección a través de vectores desconocidos. • http://jvn.jp/en/jp/JVN92854093/index.html http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000017.html http://secunia.com/advisories/39741 http://www.movabletype.com/blog/2010/05/movable-type-502.html http://www.movabletype.org/documentation/appendices/release-notes/movable-type-502.html http://www.vupen.com/english/advisories/2010/1136 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 2.6EPSS: 0%CPEs: 60EXPL: 0CVE-2009-2492
https://notcve.org/view.php?id=CVE-2009-2492
Cross-site scripting (XSS) vulnerability in mt-wizard.cgi in Six Apart Movable Type before 4.261 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2009-2480. Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados en mt-wizard.cgi en Six Apart Movable Type anteriores a v4.261, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de vectores no específicos, es una vulnerabilidad distinta a CVE-2009-2480. • http://jvn.jp/en/jp/JVN86472161/index.html http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000042.html http://secunia.com/advisories/35534 http://www.securityfocus.com/bid/35885 http://www.vupen.com/english/advisories/2009/1668 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 5.8EPSS: 0%CPEs: 57EXPL: 0CVE-2009-2481
https://notcve.org/view.php?id=CVE-2009-2481
mt-wizard.cgi in Six Apart Movable Type before 4.261, when global templates are not initialized, allows remote attackers to bypass access restrictions and (1) send e-mail to arbitrary addresses or (2) obtain sensitive information via unspecified vectors. El archivo mt-wizard.cgi en Movable Type de Six Apart anterior a versión 4.261, cuando las plantillas globales no se inicializan, permite a los atacantes remotos omitir las restricciones de acceso y (1) enviar correo electrónico a direcciones arbitrarias o (2) obtener información confidencial por medio de vectores no especificados. • http://jvn.jp/en/jp/JVN08369659/index.html http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000043.html http://secunia.com/advisories/35534 http://www.securityfocus.com/bid/35471 http://www.vupen.com/english/advisories/2009/1668 https://exchange.xforce.ibmcloud.com/vulnerabilities/51330 • CWE-287: Improper Authentication •
CVSS: 10.0EPSS: 0%CPEs: 16EXPL: 0CVE-2009-0752
https://notcve.org/view.php?id=CVE-2009-0752
Unspecified vulnerability in Movable Type Pro and Community Solution 4.x before 4.24 has unknown impact and attack vectors, possibly related to the password recovery mechanism. Vulnerabilidad sin especificar en Movable Type Pro y Community Solution v4.x anteriores a v4.24 cuyo impacto y vectores de ataque se desconocen, pero que, posiblemente, estén relacionados con el mecanismo de recuperación de contraseñas. • http://www.movabletype.com/blog/2009/02/movable-type-424-get-updated-with-better-password-recovery.html •