CVEvulnerability
CVE-2006-5080
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-09-29
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in the search function in Six Apart Movable Type 3.3 to 3.32, and Movable Type Enterprise 1.01 and 1.02, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected configurations
• six apart movable type 3.3
• six apart movable type 3.32
• six apart movable type enterprise 1.01
• six apart movable type enterprise 1.02
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://jvn.jp/jp/JVN%2368295640/index.html jvn.jp
- http://secunia.com/advisories/22109 Vendor Advisory
- http://www.osvdb.org/29177 www.osvdb.org
- http://www.securityfocus.com/bid/20228 www.securityfocus.com
- http://www.sixapart.com/movabletype/news/2006/09/mt_333-mte_103_updates.html Patch
- http://www.vupen.com/english/advisories/2006/3779 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29183 exchange.xforce.ibmcloud.com
- http://jvn.jp/jp/JVN%2368295640/index.html jvn.jp
- http://secunia.com/advisories/22109 Vendor Advisory
- http://www.osvdb.org/29177 www.osvdb.org
- http://www.securityfocus.com/bid/20228 www.securityfocus.com
- http://www.sixapart.com/movabletype/news/2006/09/mt_333-mte_103_updates.html Patch
- http://www.vupen.com/english/advisories/2006/3779 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29183 exchange.xforce.ibmcloud.com