CVE-2008-5808

Cross-site scripting (XSS) vulnerability in Six Apart Movable Type Enterprise (MTE) 1.x before 1.56; Movable Type (MT) 3.x before 3.38; and Movable Type, Movable Type Open Source (MTOS), and Movable Type Enterprise 4.x before 4.23 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly related to "application management."

Link	Resource
http://secunia.com/advisories/32935	Vendor Advisory
http://www.securityfocus.com/bid/32604
http://jvn.jp/en/jp/JVN02216739/index.html
http://www.movabletype.jp/blog/_movable_type_423.html
http://jvndb.jvn.jp/en/contents/2008/JVNDB-2008-000067.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/47019

Configuration 1

cpe:2.3:a:six_apart:movable_type:4.20:unknown:open_source:*:*:*:*:* cpe:2.3:a:sixapart:movable_type:3.15:*:*:*:*:*:*:* cpe:2.3:a:sixapart:movable_type:3.2:*:*:*:*:*:*:* cpe:2.3:a:sixapart:movable_type:3.32:*:*:*:*:*:*:* cpe:2.3:a:sixapart:movable_type:3.16:*:*:*:*:*:*:* cpe:2.3:a:sixapart:movable_type:1.5:*:enterprise:*:*:*:*:* cpe:2.3:a:sixapart:movable_type:3.1:*:*:*:*:*:*:* cpe:2.3:a:six_apart:movable_type:4:unknown:open_source:*:*:*:*:* cpe:2.3:a:sixapart:movable_type:1.00:*:enterprise:*:*:*:*:* cpe:2.3:a:sixapart:movable_type:3.33:*:*:*:*:*:*:* cpe:2.3:a:sixapart:movable_type:3.14:*:*:*:*:*:*:* cpe:2.3:a:sixapart:movable_type:3.0d:*:*:*:*:*:*:* cpe:2.3:a:six_apart:movable_type:4.20:*:*:*:*:*:*:* cpe:2.3:a:six_apart:movable_type:4:unknown:enterprise:*:*:*:*:* cpe:2.3:a:sixapart:movable_type:1.4:*:enterprise:*:*:*:*:* cpe:2.3:a:sixapart:movable_type:3.11:*:*:*:*:*:*:* cpe:2.3:a:sixapart:movable_type:3.35:*:*:*:*:*:*:* cpe:2.3:a:sixapart:movable_type:1.1:*:enterprise:*:*:*:*:* cpe:2.3:a:sixapart:movable_type:1.3:*:enterprise:*:*:*:*:* cpe:2.3:a:sixapart:movable_type:3.17:*:*:*:*:*:*:* cpe:2.3:a:sixapart:movable_type:1.2:*:enterprise:*:*:*:*:* cpe:2.3:a:sixapart:movable_type:3.01d:*:*:*:*:*:*:* cpe:2.3:a:sixapart:movable_type:1.31:*:enterprise:*:*:*:*:* cpe:2.3:a:sixapart:movable_type:3.12:*:*:*:*:*:*:* cpe:2.3:a:sixapart:movable_type:3.3:*:*:*:*:*:*:* cpe:2.3:a:six_apart:movable_type:4:*:*:*:*:*:*:* cpe:2.3:a:six_apart:movable_type:4.20:unknown:enterprise:*:*:*:*:* cpe:2.3:a:sixapart:movable_type:3.34:*:*:*:*:*:*:*

---

Published : 2009-01-02 06:11

Updated : 2017-08-08 01:33

---

NVD link : CVE-2008-5808

Mitre link : CVE-2008-5808

No products.

CWE-79