CVEvulnerability
CVE-2012-1503
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-08-29
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in Six Apart (formerly Six Apart KK) Movable Type (MT) Pro 5.13 allows remote attackers to inject arbitrary web script or HTML via the comment section.
Affected configurations
• sixapart movable type 5.13
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://osvdb.org/show/osvdb/86729 osvdb.org
- http://packetstormsecurity.org/files/117564/Movable-Type-Pro-5.13en-Cross-Site-Scripting.html Exploit
- http://www.cloudscan.me/2012/10/cve-2012-1503-movable-type-pro-513en.html Exploit
- http://www.exploit-db.com/exploits/22151 Exploit
- http://www.securityfocus.com/bid/56160 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/79521 exchange.xforce.ibmcloud.com
- http://osvdb.org/show/osvdb/86729 osvdb.org
- http://packetstormsecurity.org/files/117564/Movable-Type-Pro-5.13en-Cross-Site-Scripting.html Exploit
- http://www.cloudscan.me/2012/10/cve-2012-1503-movable-type-pro-513en.html Exploit
- http://www.exploit-db.com/exploits/22151 Exploit
- http://www.securityfocus.com/bid/56160 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/79521 exchange.xforce.ibmcloud.com