The default configuration of Movable Type prior to 4.38, 5.0x prior to 5.07, and 5.1x prior to 5.13 supports the "mt:Include file=" attribute, which allows remote authenticated users to conduct directory traversal attacks and read arbitrary files by leveraging the template-designer role.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
movabletype movable type open source 5.11 |
||
movabletype movable type open source 5.06 |
||
movabletype movable type open source 5.02 |
||
movabletype movable type open source |
||
movabletype movable type open source 4.361 |
||
movabletype movable type open source 4.3 |
||
movabletype movable type open source 4.261 |
||
movabletype movable type open source 4.2 |
||
movabletype movable type open source 4.1 |
||
movabletype movable type open source 5.12 |
||
movabletype movable type open source 5.031 |
||
movabletype movable type open source 5.03 |
||
movabletype movable type open source 4.32 |
||
movabletype movable type open source 4.31 |
||
movabletype movable type open source 4.0 |
||
movabletype movable type open source 5.1 |
||
movabletype movable type open source 5.04 |
||
movabletype movable type open source 4.34 |
||
movabletype movable type open source 4.33 |
||
movabletype movable type open source 4.23 |
||
movabletype movable type open source 5.051 |
||
movabletype movable type open source 5.05 |
||
movabletype movable type open source 4.36 |
||
movabletype movable type open source 4.35 |
||
movabletype movable type open source 4.26 |
||
movabletype movable type open source 4.25 |
||
movabletype movable type open source 4.01 |
||
movabletype movable type enterprise 5.051 |
||
movabletype movable type enterprise 5.05 |
||
movabletype movable type enterprise 5.1 |
||
movabletype movable type enterprise 4.35 |
||
movabletype movable type enterprise 4.34 |
||
movabletype movable type enterprise 4.25 |
||
movabletype movable type enterprise 4.23 |
||
movabletype movable type enterprise |
||
movabletype movable type enterprise 5.11 |
||
movabletype movable type enterprise 5.06 |
||
movabletype movable type enterprise 4.361 |
||
movabletype movable type enterprise 4.36 |
||
movabletype movable type enterprise 4.261 |
||
movabletype movable type enterprise 4.26 |
||
movabletype movable type enterprise 4.1 |
||
movabletype movable type enterprise 4.01 |
||
movabletype movable type enterprise 4.0 |
||
movabletype movable type enterprise 5.12 |
||
movabletype movable type enterprise 5.03 |
||
movabletype movable type enterprise 5.02 |
||
movabletype movable type enterprise 4.31 |
||
movabletype movable type enterprise 4.3 |
||
movabletype movable type enterprise 4.2 |
||
movabletype movable type enterprise 5.04 |
||
movabletype movable type enterprise 5.031 |
||
movabletype movable type enterprise 4.33 |
||
movabletype movable type enterprise 4.32 |
||
movabletype movable type advanced 5.04 |
||
movabletype movable type advanced 5.031 |
||
movabletype movable type advanced 4.33 |
||
movabletype movable type advanced 4.32 |
||
movabletype movable type advanced 4.1 |
||
movabletype movable type advanced 4.0 |
||
movabletype movable type advanced 5.05 |
||
movabletype movable type advanced 5.1 |
||
movabletype movable type advanced 4.35 |
||
movabletype movable type advanced 4.34 |
||
movabletype movable type advanced 4.23 |
||
movabletype movable type advanced 4.2 |
||
movabletype movable type advanced |
||
movabletype movable type advanced 5.06 |
||
movabletype movable type advanced 5.051 |
||
movabletype movable type advanced 4.361 |
||
movabletype movable type advanced 4.36 |
||
movabletype movable type advanced 4.261 |
||
movabletype movable type advanced 4.26 |
||
movabletype movable type advanced 4.25 |
||
movabletype movable type advanced 4.01 |
||
movabletype movable type advanced 5.12 |
||
movabletype movable type advanced 5.11 |
||
movabletype movable type advanced 5.03 |
||
movabletype movable type advanced 5.02 |
||
movabletype movable type advanced 4.31 |
||
movabletype movable type advanced 4.3 |
||
movabletype movable type pro 5.12 |
||
movabletype movable type pro 5.11 |
||
movabletype movable type pro 5.03 |
||
movabletype movable type pro 5.02 |
||
movabletype movable type pro 4.3 |
||
movabletype movable type pro 4.261 |
||
movabletype movable type pro 4.2 |
||
movabletype movable type pro 4.1 |
||
movabletype movable type pro 5.04 |
||
movabletype movable type pro 5.031 |
||
movabletype movable type pro 4.32 |
||
movabletype movable type pro 4.31 |
||
movabletype movable type pro 4.0 |
||
movabletype movable type pro 5.05 |
||
movabletype movable type pro 5.1 |
||
movabletype movable type pro 4.34 |
||
movabletype movable type pro 4.33 |
||
movabletype movable type pro 4.23 |
||
movabletype movable type pro |
||
movabletype movable type pro 5.06 |
||
movabletype movable type pro 5.051 |
||
movabletype movable type pro 4.361 |
||
movabletype movable type pro 4.36 |
||
movabletype movable type pro 4.35 |
||
movabletype movable type pro 4.26 |
||
movabletype movable type pro 4.25 |
||
movabletype movable type pro 4.01 |