Unscored DSA-2423-1 8 CVEs

movabletype-opensource - several

Published Mar 2, 2012 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 6.0	movabletype-opensource	4.3.8+dfsg-0+squeeze2

Vulnerabilities 8

Unscored —

CVE-2011-5084

Cross-site scripting (XSS) vulnerability in Movable Type 4.x before 4.36 and 5.x before 5.05 allows remote attackers to…

Apr 2, 2012
Unscored —

CVE-2011-5085

Unspecified vulnerability in Movable Type 4.x before 4.36 and 5.x before 5.05 allows remote attackers to read or modify…

Apr 2, 2012
Unscored —

CVE-2012-0317

Multiple cross-site request forgery (CSRF) vulnerabilities in Movable Type before 4.38, 5.0x before 5.07, and 5.1x befo…

Mar 3, 2012
Unscored —

CVE-2012-0318

Multiple cross-site scripting (XSS) vulnerabilities in Movable Type before 4.38, 5.0x before 5.07, and 5.1x before 5.13…

Mar 3, 2012
Unscored —

CVE-2012-0319

The file-management system in Movable Type before 4.38, 5.0x before 5.07, and 5.1x before 5.13 allows remote authentica…

Mar 3, 2012
Unscored —

CVE-2012-0320

Movable Type before 4.38, 5.0x before 5.07, and 5.1x before 5.13 allows remote attackers to take control of sessions vi…

Mar 3, 2012
Unscored —

CVE-2012-1262

Cross-site scripting (XSS) vulnerability in cgi-bin/mt/mt-wizard.cgi in Movable Type before 4.38, 5.0x before 5.07, and…

Mar 3, 2012
Unscored —

CVE-2012-1497

The default configuration of Movable Type before 4.38, 5.0x before 5.07, and 5.1x before 5.13 supports the "mt:Include …

Mar 3, 2012