PT-2006-5818 · Six Apart · Movable Type+1

Publicado 2006-09-29 · Atualizado 2017-07-20 · CVE-2006-5080

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Movable Type versions 3.3 through 3.32 Movable Type Enterprise versions 1.01 through 1.02

Description A cross-site scripting (XSS) issue exists in the search function, allowing remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Recommendations For Movable Type versions 3.3 through 3.32, update to a version that fixes the XSS vulnerability in the search function. For Movable Type Enterprise versions 1.01 through 1.02, update to a version that fixes the XSS vulnerability in the search function.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2006-5080

Produtos afetados

Movable Type

Movable Type Enterprise

Referências · 9

• http://securityfocus.com/bid/20228 · Nota
• http://jvn.jp/jp/JVN%2368295640/index.html · Nota
• http://osvdb.org/29177 · Nota
• http://vupen.com/english/advisories/2006/3779 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29183 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5080 · Nota
• http://secunia.com/advisories/22109 · Aviso do Fabricante
• http://sixapart.com/movabletype/news/2006/09/mt_333-mte_103_updates.html · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2006-5080 · Nota de Segurança