Vulnerability Details CVE-2009-2481
mt-wizard.cgi in Six Apart Movable Type before 4.261, when global templates are not initialized, allows remote attackers to bypass access restrictions and (1) send e-mail to arbitrary addresses or (2) obtain sensitive information via unspecified vectors.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 56.5%
CVSS Severity
CVSS v2 Score 5.8
Products affected by CVE-2009-2481
-
cpe:2.3:a:six_apart:movable_type:1.54
-
cpe:2.3:a:six_apart:movable_type:2.6
-
cpe:2.3:a:six_apart:movable_type:2.63
-
cpe:2.3:a:six_apart:movable_type:3.16
-
cpe:2.3:a:six_apart:movable_type:3.17
-
cpe:2.3:a:six_apart:movable_type:3.3
-
cpe:2.3:a:six_apart:movable_type:3.32
-
cpe:2.3:a:six_apart:movable_type:3.33
-
cpe:2.3:a:six_apart:movable_type:3.36
-
cpe:2.3:a:six_apart:movable_type:4.20
-
cpe:2.3:a:six_apart:movable_type:4.25
-
cpe:2.3:a:sixapart:movable_type:-
-
cpe:2.3:a:sixapart:movable_type:1.0
-
cpe:2.3:a:sixapart:movable_type:1.00
-
cpe:2.3:a:sixapart:movable_type:1.1
-
cpe:2.3:a:sixapart:movable_type:1.11
-
cpe:2.3:a:sixapart:movable_type:1.2
-
cpe:2.3:a:sixapart:movable_type:1.21
-
cpe:2.3:a:sixapart:movable_type:1.22
-
cpe:2.3:a:sixapart:movable_type:1.23
-
cpe:2.3:a:sixapart:movable_type:1.24
-
cpe:2.3:a:sixapart:movable_type:1.25
-
cpe:2.3:a:sixapart:movable_type:1.26
-
cpe:2.3:a:sixapart:movable_type:1.27
-
cpe:2.3:a:sixapart:movable_type:1.28
-
cpe:2.3:a:sixapart:movable_type:1.29
-
cpe:2.3:a:sixapart:movable_type:1.3
-
cpe:2.3:a:sixapart:movable_type:1.30
-
cpe:2.3:a:sixapart:movable_type:1.31
-
cpe:2.3:a:sixapart:movable_type:1.32
-
cpe:2.3:a:sixapart:movable_type:1.33
-
cpe:2.3:a:sixapart:movable_type:1.34
-
cpe:2.3:a:sixapart:movable_type:1.35
-
cpe:2.3:a:sixapart:movable_type:1.36
-
cpe:2.3:a:sixapart:movable_type:1.37
-
cpe:2.3:a:sixapart:movable_type:1.38
-
cpe:2.3:a:sixapart:movable_type:1.39
-
cpe:2.3:a:sixapart:movable_type:1.4
-
cpe:2.3:a:sixapart:movable_type:1.40
-
cpe:2.3:a:sixapart:movable_type:1.41
-
cpe:2.3:a:sixapart:movable_type:1.42
-
cpe:2.3:a:sixapart:movable_type:1.43
-
cpe:2.3:a:sixapart:movable_type:1.44
-
cpe:2.3:a:sixapart:movable_type:1.45
-
cpe:2.3:a:sixapart:movable_type:1.46
-
cpe:2.3:a:sixapart:movable_type:1.47
-
cpe:2.3:a:sixapart:movable_type:1.5
-
cpe:2.3:a:sixapart:movable_type:1.52
-
cpe:2.3:a:sixapart:movable_type:1.53
-
cpe:2.3:a:sixapart:movable_type:1.59
-
cpe:2.3:a:sixapart:movable_type:2.0
-
cpe:2.3:a:sixapart:movable_type:2.1
-
cpe:2.3:a:sixapart:movable_type:2.11
-
cpe:2.3:a:sixapart:movable_type:2.2
-
cpe:2.3:a:sixapart:movable_type:2.21
-
cpe:2.3:a:sixapart:movable_type:2.5
-
cpe:2.3:a:sixapart:movable_type:2.51
-
cpe:2.3:a:sixapart:movable_type:2.6
-
cpe:2.3:a:sixapart:movable_type:2.61
-
cpe:2.3:a:sixapart:movable_type:2.62
-
cpe:2.3:a:sixapart:movable_type:2.63
-
cpe:2.3:a:sixapart:movable_type:2.64
-
cpe:2.3:a:sixapart:movable_type:2.65
-
cpe:2.3:a:sixapart:movable_type:2.66
-
cpe:2.3:a:sixapart:movable_type:2.661
-
cpe:2.3:a:sixapart:movable_type:3.01d
-
cpe:2.3:a:sixapart:movable_type:3.0d
-
cpe:2.3:a:sixapart:movable_type:3.1
-
cpe:2.3:a:sixapart:movable_type:3.11
-
cpe:2.3:a:sixapart:movable_type:3.12
-
cpe:2.3:a:sixapart:movable_type:3.14
-
cpe:2.3:a:sixapart:movable_type:3.15
-
cpe:2.3:a:sixapart:movable_type:3.16
-
cpe:2.3:a:sixapart:movable_type:3.17
-
cpe:2.3:a:sixapart:movable_type:3.2
-
cpe:2.3:a:sixapart:movable_type:3.3
-
cpe:2.3:a:sixapart:movable_type:3.31
-
cpe:2.3:a:sixapart:movable_type:3.32
-
cpe:2.3:a:sixapart:movable_type:3.33
-
cpe:2.3:a:sixapart:movable_type:3.34
-
cpe:2.3:a:sixapart:movable_type:3.35
-
cpe:2.3:a:sixapart:movable_type:3.36
-
cpe:2.3:a:sixapart:movable_type:3.37
-
cpe:2.3:a:sixapart:movable_type:3.38
-
cpe:2.3:a:sixapart:movable_type:4.0
-
cpe:2.3:a:sixapart:movable_type:4.01
-
cpe:2.3:a:sixapart:movable_type:4.01a
-
cpe:2.3:a:sixapart:movable_type:4.01b
-
cpe:2.3:a:sixapart:movable_type:4.01c
-
cpe:2.3:a:sixapart:movable_type:4.1
-
cpe:2.3:a:sixapart:movable_type:4.12
-
cpe:2.3:a:sixapart:movable_type:4.13
-
cpe:2.3:a:sixapart:movable_type:4.14
-
cpe:2.3:a:sixapart:movable_type:4.15
-
cpe:2.3:a:sixapart:movable_type:4.2
-
cpe:2.3:a:sixapart:movable_type:4.21
-
cpe:2.3:a:sixapart:movable_type:4.22
-
cpe:2.3:a:sixapart:movable_type:4.23
-
cpe:2.3:a:sixapart:movable_type:4.24
-
cpe:2.3:a:sixapart:movable_type:4.25
-
cpe:2.3:a:sixapart:movable_type:4.26
-
cpe:2.3:a:sixapart:movable_type:4.3