CVE-2008-5846

Six Apart Movable Type (MT) before 4.23 allows remote authenticated users with create permission for posts to bypass intended access restrictions and publish posts via a "system-wide entry listing screen."

Link	Resource
http://www.movabletype.org/mt_423_change_log.html
http://www.securityfocus.com/bid/33133
https://exchange.xforce.ibmcloud.com/vulnerabilities/47759

Configuration 1

cpe:2.3:a:sixapart:movable_type:3.15:*:*:*:*:*:*:* cpe:2.3:a:sixapart:movable_type:3.2:*:*:*:*:*:*:* cpe:2.3:a:sixapart:movable_type:3.32:*:*:*:*:*:*:* cpe:2.3:a:sixapart:movable_type:3.16:*:*:*:*:*:*:* cpe:2.3:a:sixapart:movable_type:3.1:*:*:*:*:*:*:* cpe:2.3:a:sixapart:movable_type:3.33:*:*:*:*:*:*:* cpe:2.3:a:sixapart:movable_type:3.14:*:*:*:*:*:*:* cpe:2.3:a:sixapart:movable_type:3.0d:*:*:*:*:*:*:* cpe:2.3:a:sixapart:movable_type:3.11:*:*:*:*:*:*:* cpe:2.3:a:sixapart:movable_type:3.35:*:*:*:*:*:*:* cpe:2.3:a:sixapart:movable_type:*:*:*:*:*:*:*:* cpe:2.3:a:sixapart:movable_type:4.2:*:*:*:*:*:*:* cpe:2.3:a:sixapart:movable_type:3.17:*:*:*:*:*:*:* cpe:2.3:a:sixapart:movable_type:3.01d:*:*:*:*:*:*:* cpe:2.3:a:sixapart:movable_type:3.12:*:*:*:*:*:*:* cpe:2.3:a:sixapart:movable_type:3.3:*:*:*:*:*:*:* cpe:2.3:a:sixapart:movable_type:3.34:*:*:*:*:*:*:*

---

Published : 2009-01-05 08:30

Updated : 2017-08-08 01:33

---

NVD link : CVE-2008-5846

Mitre link : CVE-2008-5846

No products.

CWE-264