CVEvulnerability

CVE-2008-5808

4.3 MEDIUM Published 2009-01-02 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2009-01-02
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
CWE-79

Description

Cross-site scripting (XSS) vulnerability in Six Apart Movable Type Enterprise (MTE) 1.x before 1.56; Movable Type (MT) 3.x before 3.38; and Movable Type, Movable Type Open Source (MTOS), and Movable Type Enterprise 4.x before 4.23 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly related to "application management."

Affected configurations

• six apart movable type 4 • six apart movable type 4.20 • sixapart movable type 1.00 • sixapart movable type 1.1 • sixapart movable type 1.2 • sixapart movable type 1.3 • sixapart movable type 1.4 • sixapart movable type 1.5 • sixapart movable type 1.31 • sixapart movable type 3.0d • sixapart movable type 3.1 • sixapart movable type 3.01d • sixapart movable type 3.2 • sixapart movable type 3.3 • sixapart movable type 3.11 • sixapart movable type 3.12 • sixapart movable type 3.14 • sixapart movable type 3.15 • sixapart movable type 3.16 • sixapart movable type 3.17 • sixapart movable type 3.32 • sixapart movable type 3.33 • sixapart movable type 3.34 • sixapart movable type 3.35

Related

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References