2.6
CVSSv2

CVE-2009-2492

Published: 17/07/2009 Updated: 07/08/2009
CVSS v2 Base Score: 2.6 | Impact Score: 2.9 | Exploitability Score: 4.9
VMScore: 231
Vector: AV:N/AC:H/Au:N/C:N/I:P/A:N

Vulnerability Summary

Cross-site scripting (XSS) vulnerability in mt-wizard.cgi in Six Apart Movable Type prior to 4.261 allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2009-2480.

Vulnerable Product Search on Vulmon Subscribe to Product

sixapart movable type 4.2

sixapart movable type 4.01

sixapart movable type 3.3

sixapart movable type 3.2

sixapart movable type 3.1

sixapart movable type 3.0d

sixapart movable type 1.1

sixapart movable type 1.00

six apart movable type 3.17

six apart movable type 3.16

six apart movable type 4.20

sixapart movable type 4.23

sixapart movable type 4.21

sixapart movable type 4.12

sixapart movable type 4.1

sixapart movable type 4.0

sixapart movable type 3.35

sixapart movable type 3.15

sixapart movable type 3.14

sixapart movable type 1.4

sixapart movable type 1.31

six apart movable type 4

six apart movable type 3.33

six apart movable type

six apart movable type 1.54

sixapart movable type 3.34

sixapart movable type 3.33

sixapart movable type 3.32

sixapart movable type 3.12

sixapart movable type 3.11

sixapart movable type 1.3

sixapart movable type 1.2

six apart movable type 3.32

six apart movable type 3.3

six apart movable type 3.36

sixapart movable type 3.17

sixapart movable type 3.16

sixapart movable type 3.01d

sixapart movable type 1.5

six apart ltd movable type 3.33

six apart ltd movable type

six apart movable type 2.63

six apart movable type 2.6