CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2008-5845

Multiple cross-site scripting (XSS) vulnerabilities in Six Apart Movable Type (MT) before 4.23 allow remote attackers to inject arbitrary web script or HTML via a (1) MTEntryAuthorUsername, (2) MTAuthorDisplayName, (3) MTEntryAuthorDisplayName, or (4) MTCommenterName field in a Profile View template; a (5) listing screen or (6) edit screen in the CMS app; (7) a TrackBack title, related to the HTML sanitization library; or (8) a user archive name (aka archive title) on a published Community Blog template.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 48.7%

CVSS Severity

CVSS v2 Score 4.3

References

Products affected by CVE-2008-5845

Sixapart » Movable Type » Version: N/A

cpe:2.3:a:sixapart:movable_type:-
Sixapart » Movable Type » Version: 1.0

cpe:2.3:a:sixapart:movable_type:1.0
Sixapart » Movable Type » Version: 1.1

cpe:2.3:a:sixapart:movable_type:1.1
Sixapart » Movable Type » Version: 1.11

cpe:2.3:a:sixapart:movable_type:1.11
Sixapart » Movable Type » Version: 1.2

cpe:2.3:a:sixapart:movable_type:1.2
Sixapart » Movable Type » Version: 1.21

cpe:2.3:a:sixapart:movable_type:1.21
Sixapart » Movable Type » Version: 1.22

cpe:2.3:a:sixapart:movable_type:1.22
Sixapart » Movable Type » Version: 1.23

cpe:2.3:a:sixapart:movable_type:1.23
Sixapart » Movable Type » Version: 1.24

cpe:2.3:a:sixapart:movable_type:1.24
Sixapart » Movable Type » Version: 1.25

cpe:2.3:a:sixapart:movable_type:1.25
Sixapart » Movable Type » Version: 1.26

cpe:2.3:a:sixapart:movable_type:1.26
Sixapart » Movable Type » Version: 1.27

cpe:2.3:a:sixapart:movable_type:1.27
Sixapart » Movable Type » Version: 1.28

cpe:2.3:a:sixapart:movable_type:1.28
Sixapart » Movable Type » Version: 1.29

cpe:2.3:a:sixapart:movable_type:1.29
Sixapart » Movable Type » Version: 1.3

cpe:2.3:a:sixapart:movable_type:1.3
Sixapart » Movable Type » Version: 1.30

cpe:2.3:a:sixapart:movable_type:1.30
Sixapart » Movable Type » Version: 1.31

cpe:2.3:a:sixapart:movable_type:1.31
Sixapart » Movable Type » Version: 1.32

cpe:2.3:a:sixapart:movable_type:1.32
Sixapart » Movable Type » Version: 1.33

cpe:2.3:a:sixapart:movable_type:1.33
Sixapart » Movable Type » Version: 1.34

cpe:2.3:a:sixapart:movable_type:1.34
Sixapart » Movable Type » Version: 1.35

cpe:2.3:a:sixapart:movable_type:1.35
Sixapart » Movable Type » Version: 1.36

cpe:2.3:a:sixapart:movable_type:1.36
Sixapart » Movable Type » Version: 1.37

cpe:2.3:a:sixapart:movable_type:1.37
Sixapart » Movable Type » Version: 1.38

cpe:2.3:a:sixapart:movable_type:1.38
Sixapart » Movable Type » Version: 1.39

cpe:2.3:a:sixapart:movable_type:1.39
Sixapart » Movable Type » Version: 1.4

cpe:2.3:a:sixapart:movable_type:1.4
Sixapart » Movable Type » Version: 1.40

cpe:2.3:a:sixapart:movable_type:1.40
Sixapart » Movable Type » Version: 1.41

cpe:2.3:a:sixapart:movable_type:1.41
Sixapart » Movable Type » Version: 1.42

cpe:2.3:a:sixapart:movable_type:1.42
Sixapart » Movable Type » Version: 1.43

cpe:2.3:a:sixapart:movable_type:1.43
Sixapart » Movable Type » Version: 1.44

cpe:2.3:a:sixapart:movable_type:1.44
Sixapart » Movable Type » Version: 1.45

cpe:2.3:a:sixapart:movable_type:1.45
Sixapart » Movable Type » Version: 1.46

cpe:2.3:a:sixapart:movable_type:1.46
Sixapart » Movable Type » Version: 1.47

cpe:2.3:a:sixapart:movable_type:1.47
Sixapart » Movable Type » Version: 1.52

cpe:2.3:a:sixapart:movable_type:1.52
Sixapart » Movable Type » Version: 1.53

cpe:2.3:a:sixapart:movable_type:1.53
Sixapart » Movable Type » Version: 1.59

cpe:2.3:a:sixapart:movable_type:1.59
Sixapart » Movable Type » Version: 2.0

cpe:2.3:a:sixapart:movable_type:2.0
Sixapart » Movable Type » Version: 2.1

cpe:2.3:a:sixapart:movable_type:2.1
Sixapart » Movable Type » Version: 2.11

cpe:2.3:a:sixapart:movable_type:2.11
Sixapart » Movable Type » Version: 2.2

cpe:2.3:a:sixapart:movable_type:2.2
Sixapart » Movable Type » Version: 2.21

cpe:2.3:a:sixapart:movable_type:2.21
Sixapart » Movable Type » Version: 2.5

cpe:2.3:a:sixapart:movable_type:2.5
Sixapart » Movable Type » Version: 2.51

cpe:2.3:a:sixapart:movable_type:2.51
Sixapart » Movable Type » Version: 2.6

cpe:2.3:a:sixapart:movable_type:2.6
Sixapart » Movable Type » Version: 2.61

cpe:2.3:a:sixapart:movable_type:2.61
Sixapart » Movable Type » Version: 2.62

cpe:2.3:a:sixapart:movable_type:2.62
Sixapart » Movable Type » Version: 2.63

cpe:2.3:a:sixapart:movable_type:2.63
Sixapart » Movable Type » Version: 2.64

cpe:2.3:a:sixapart:movable_type:2.64
Sixapart » Movable Type » Version: 2.65

cpe:2.3:a:sixapart:movable_type:2.65
Sixapart » Movable Type » Version: 2.66

cpe:2.3:a:sixapart:movable_type:2.66
Sixapart » Movable Type » Version: 2.661

cpe:2.3:a:sixapart:movable_type:2.661
Sixapart » Movable Type » Version: 3.01d

cpe:2.3:a:sixapart:movable_type:3.01d
Sixapart » Movable Type » Version: 3.0d

cpe:2.3:a:sixapart:movable_type:3.0d
Sixapart » Movable Type » Version: 3.1

cpe:2.3:a:sixapart:movable_type:3.1
Sixapart » Movable Type » Version: 3.11

cpe:2.3:a:sixapart:movable_type:3.11
Sixapart » Movable Type » Version: 3.12

cpe:2.3:a:sixapart:movable_type:3.12
Sixapart » Movable Type » Version: 3.14

cpe:2.3:a:sixapart:movable_type:3.14
Sixapart » Movable Type » Version: 3.15

cpe:2.3:a:sixapart:movable_type:3.15
Sixapart » Movable Type » Version: 3.16

cpe:2.3:a:sixapart:movable_type:3.16
Sixapart » Movable Type » Version: 3.17

cpe:2.3:a:sixapart:movable_type:3.17
Sixapart » Movable Type » Version: 3.2

cpe:2.3:a:sixapart:movable_type:3.2
Sixapart » Movable Type » Version: 3.3

cpe:2.3:a:sixapart:movable_type:3.3
Sixapart » Movable Type » Version: 3.31

cpe:2.3:a:sixapart:movable_type:3.31
Sixapart » Movable Type » Version: 3.32

cpe:2.3:a:sixapart:movable_type:3.32
Sixapart » Movable Type » Version: 3.33

cpe:2.3:a:sixapart:movable_type:3.33
Sixapart » Movable Type » Version: 3.34

cpe:2.3:a:sixapart:movable_type:3.34
Sixapart » Movable Type » Version: 3.35

cpe:2.3:a:sixapart:movable_type:3.35
Sixapart » Movable Type » Version: 3.36

cpe:2.3:a:sixapart:movable_type:3.36
Sixapart » Movable Type » Version: 3.37

cpe:2.3:a:sixapart:movable_type:3.37
Sixapart » Movable Type » Version: 3.38

cpe:2.3:a:sixapart:movable_type:3.38
Sixapart » Movable Type » Version: 4.0

cpe:2.3:a:sixapart:movable_type:4.0
Sixapart » Movable Type » Version: 4.01

cpe:2.3:a:sixapart:movable_type:4.01
Sixapart » Movable Type » Version: 4.01a

cpe:2.3:a:sixapart:movable_type:4.01a
Sixapart » Movable Type » Version: 4.01b

cpe:2.3:a:sixapart:movable_type:4.01b
Sixapart » Movable Type » Version: 4.01c

cpe:2.3:a:sixapart:movable_type:4.01c
Sixapart » Movable Type » Version: 4.1

cpe:2.3:a:sixapart:movable_type:4.1
Sixapart » Movable Type » Version: 4.12

cpe:2.3:a:sixapart:movable_type:4.12
Sixapart » Movable Type » Version: 4.13

cpe:2.3:a:sixapart:movable_type:4.13
Sixapart » Movable Type » Version: 4.14

cpe:2.3:a:sixapart:movable_type:4.14
Sixapart » Movable Type » Version: 4.15

cpe:2.3:a:sixapart:movable_type:4.15
Sixapart » Movable Type » Version: 4.2

cpe:2.3:a:sixapart:movable_type:4.2
Sixapart » Movable Type » Version: 4.21

cpe:2.3:a:sixapart:movable_type:4.21
Sixapart » Movable Type » Version: 4.3

cpe:2.3:a:sixapart:movable_type:4.3

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2008-5845

Products

Pricing

Contact Us