Vulnerability Details CVE-2009-2492
Cross-site scripting (XSS) vulnerability in mt-wizard.cgi in Six Apart Movable Type before 4.261 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2009-2480.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 57.0%
CVSS Severity
CVSS v2 Score 2.6
References
- http://jvn.jp/en/jp/JVN86472161/index.html
- http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000042.html
- http://secunia.com/advisories/35534
- http://www.securityfocus.com/bid/35885
- http://www.vupen.com/english/advisories/2009/1668
- http://jvn.jp/en/jp/JVN86472161/index.html
- http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000042.html
- http://secunia.com/advisories/35534
- http://www.securityfocus.com/bid/35885
- http://www.vupen.com/english/advisories/2009/1668
Products affected by CVE-2009-2492
-
cpe:2.3:a:six_apart:movable_type:*
-
cpe:2.3:a:six_apart:movable_type:1.54
-
cpe:2.3:a:six_apart:movable_type:2.6
-
cpe:2.3:a:six_apart:movable_type:2.63
-
cpe:2.3:a:six_apart:movable_type:3.16
-
cpe:2.3:a:six_apart:movable_type:3.17
-
cpe:2.3:a:six_apart:movable_type:3.3
-
cpe:2.3:a:six_apart:movable_type:3.32
-
cpe:2.3:a:six_apart:movable_type:3.33
-
cpe:2.3:a:six_apart:movable_type:3.36
-
cpe:2.3:a:six_apart:movable_type:4
-
cpe:2.3:a:six_apart:movable_type:4.20
-
cpe:2.3:a:six_apart_ltd:movable_type:*
-
cpe:2.3:a:six_apart_ltd:movable_type:3.33
-
cpe:2.3:a:sixapart:movable_type:1.00
-
cpe:2.3:a:sixapart:movable_type:1.1
-
cpe:2.3:a:sixapart:movable_type:1.2
-
cpe:2.3:a:sixapart:movable_type:1.3
-
cpe:2.3:a:sixapart:movable_type:1.31
-
cpe:2.3:a:sixapart:movable_type:1.4
-
cpe:2.3:a:sixapart:movable_type:1.5
-
cpe:2.3:a:sixapart:movable_type:3.01d
-
cpe:2.3:a:sixapart:movable_type:3.0d
-
cpe:2.3:a:sixapart:movable_type:3.1
-
cpe:2.3:a:sixapart:movable_type:3.11
-
cpe:2.3:a:sixapart:movable_type:3.12
-
cpe:2.3:a:sixapart:movable_type:3.14
-
cpe:2.3:a:sixapart:movable_type:3.15
-
cpe:2.3:a:sixapart:movable_type:3.16
-
cpe:2.3:a:sixapart:movable_type:3.17
-
cpe:2.3:a:sixapart:movable_type:3.2
-
cpe:2.3:a:sixapart:movable_type:3.3
-
cpe:2.3:a:sixapart:movable_type:3.32
-
cpe:2.3:a:sixapart:movable_type:3.33
-
cpe:2.3:a:sixapart:movable_type:3.34
-
cpe:2.3:a:sixapart:movable_type:3.35
-
cpe:2.3:a:sixapart:movable_type:4.0
-
cpe:2.3:a:sixapart:movable_type:4.01
-
cpe:2.3:a:sixapart:movable_type:4.1
-
cpe:2.3:a:sixapart:movable_type:4.12
-
cpe:2.3:a:sixapart:movable_type:4.2
-
cpe:2.3:a:sixapart:movable_type:4.21
-
cpe:2.3:a:sixapart:movable_type:4.23