CVE-2009-2492

Cross-site scripting (XSS) vulnerability in mt-wizard.cgi in Six Apart Movable Type before 4.261 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2009-2480.

• six apart movable type (<= 4.25) • six apart movable type 1.54 • six apart movable type 2.6 • six apart movable type 2.63 • six apart movable type 3.3 • six apart movable type 3.16 • six apart movable type 3.17 • six apart movable type 3.32 • six apart movable type 3.33 • six apart movable type 3.36 • six apart movable type 4 • six apart movable type 4.20 • six apart ltd movable type • six apart ltd movable type 3.33 • sixapart movable type 1.00 • sixapart movable type 1.1 • sixapart movable type 1.2 • sixapart movable type 1.3 • sixapart movable type 1.4 • sixapart movable type 1.5 • sixapart movable type 1.31 • sixapart movable type 3.0d • sixapart movable type 3.1 • sixapart movable type 3.01d • sixapart movable type 3.2 • sixapart movable type 3.3 • sixapart movable type 3.11 • sixapart movable type 3.12 • sixapart movable type 3.14 • sixapart movable type 3.15 • sixapart movable type 3.16 • sixapart movable type 3.17 • sixapart movable type 3.32 • sixapart movable type 3.33 • sixapart movable type 3.34 • sixapart movable type 3.35 • sixapart movable type 4.0 • sixapart movable type 4.01 • sixapart movable type 4.1 • sixapart movable type 4.2 • sixapart movable type 4.12 • sixapart movable type 4.21 • sixapart movable type 4.23