medium4.3
CVE-2006-5080
Cross-site scripting (XSS) vulnerability in the search function in Six Apart Movable Type 3.3 to 3.32, and Movable Type Enterprise 1.01 and 1.02, allows remote…
Impact
Cross-site scripting (XSS) vulnerability in the search function in Six Apart Movable Type 3.3 to 3.32, and Movable Type Enterprise 1.01 and 1.02, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Six Apart | Movable Type | Versions 3.3, 3.32, enterprise_1.01, enterprise_1.02 |
Weakness classification
References
- NVD record
- CVE.org record
- http://jvn.jp/jp/JVN%2368295640/index.html
- http://secunia.com/advisories/22109
- http://www.osvdb.org/29177
- http://www.securityfocus.com/bid/20228
- http://www.sixapart.com/movabletype/news/2006/09/mt_333-mte_103_updates.html
- http://www.vupen.com/english/advisories/2006/3779
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29183
- http://jvn.jp/jp/JVN%2368295640/index.html
- http://secunia.com/advisories/22109
- http://www.osvdb.org/29177
- http://www.securityfocus.com/bid/20228
- http://www.sixapart.com/movabletype/news/2006/09/mt_333-mte_103_updates.html
- http://www.vupen.com/english/advisories/2006/3779
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29183