Vulnerability Details CVE-2012-1262
Cross-site scripting (XSS) vulnerability in cgi-bin/mt/mt-wizard.cgi in Movable Type before 4.38, 5.0x before 5.07, and 5.1x before 5.13, when the product is incompletely installed, allows remote attackers to inject arbitrary web script or HTML via the dbuser parameter, a different vulnerability than CVE-2012-0318.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.008
EPSS Ranking 73.7%
CVSS Severity
CVSS v2 Score 4.3
Products affected by CVE-2012-1262
-
cpe:2.3:a:movabletype:movable_type_advanced:*
-
cpe:2.3:a:movabletype:movable_type_advanced:4.0
-
cpe:2.3:a:movabletype:movable_type_advanced:4.01
-
cpe:2.3:a:movabletype:movable_type_advanced:4.1
-
cpe:2.3:a:movabletype:movable_type_advanced:4.2
-
cpe:2.3:a:movabletype:movable_type_advanced:4.23
-
cpe:2.3:a:movabletype:movable_type_advanced:4.25
-
cpe:2.3:a:movabletype:movable_type_advanced:4.26
-
cpe:2.3:a:movabletype:movable_type_advanced:4.261
-
cpe:2.3:a:movabletype:movable_type_advanced:4.3
-
cpe:2.3:a:movabletype:movable_type_advanced:4.31
-
cpe:2.3:a:movabletype:movable_type_advanced:4.32
-
cpe:2.3:a:movabletype:movable_type_advanced:4.33
-
cpe:2.3:a:movabletype:movable_type_advanced:4.34
-
cpe:2.3:a:movabletype:movable_type_advanced:4.35
-
cpe:2.3:a:movabletype:movable_type_advanced:4.36
-
cpe:2.3:a:movabletype:movable_type_advanced:4.361
-
cpe:2.3:a:movabletype:movable_type_advanced:5.02
-
cpe:2.3:a:movabletype:movable_type_advanced:5.03
-
cpe:2.3:a:movabletype:movable_type_advanced:5.031
-
cpe:2.3:a:movabletype:movable_type_advanced:5.04
-
cpe:2.3:a:movabletype:movable_type_advanced:5.05
-
cpe:2.3:a:movabletype:movable_type_advanced:5.051
-
cpe:2.3:a:movabletype:movable_type_advanced:5.06
-
cpe:2.3:a:movabletype:movable_type_advanced:5.1
-
cpe:2.3:a:movabletype:movable_type_advanced:5.11
-
cpe:2.3:a:movabletype:movable_type_advanced:5.12
-
cpe:2.3:a:movabletype:movable_type_enterprise:*
-
cpe:2.3:a:movabletype:movable_type_enterprise:4.0
-
cpe:2.3:a:movabletype:movable_type_enterprise:4.01
-
cpe:2.3:a:movabletype:movable_type_enterprise:4.1
-
cpe:2.3:a:movabletype:movable_type_enterprise:4.2
-
cpe:2.3:a:movabletype:movable_type_enterprise:4.23
-
cpe:2.3:a:movabletype:movable_type_enterprise:4.25
-
cpe:2.3:a:movabletype:movable_type_enterprise:4.26
-
cpe:2.3:a:movabletype:movable_type_enterprise:4.261
-
cpe:2.3:a:movabletype:movable_type_enterprise:4.3
-
cpe:2.3:a:movabletype:movable_type_enterprise:4.31
-
cpe:2.3:a:movabletype:movable_type_enterprise:4.32
-
cpe:2.3:a:movabletype:movable_type_enterprise:4.33
-
cpe:2.3:a:movabletype:movable_type_enterprise:4.34
-
cpe:2.3:a:movabletype:movable_type_enterprise:4.35
-
cpe:2.3:a:movabletype:movable_type_enterprise:4.36
-
cpe:2.3:a:movabletype:movable_type_enterprise:4.361
-
cpe:2.3:a:movabletype:movable_type_enterprise:5.02
-
cpe:2.3:a:movabletype:movable_type_enterprise:5.03
-
cpe:2.3:a:movabletype:movable_type_enterprise:5.031
-
cpe:2.3:a:movabletype:movable_type_enterprise:5.04
-
cpe:2.3:a:movabletype:movable_type_enterprise:5.05
-
cpe:2.3:a:movabletype:movable_type_enterprise:5.051
-
cpe:2.3:a:movabletype:movable_type_enterprise:5.06
-
cpe:2.3:a:movabletype:movable_type_enterprise:5.1
-
cpe:2.3:a:movabletype:movable_type_enterprise:5.11
-
cpe:2.3:a:movabletype:movable_type_enterprise:5.12
-
cpe:2.3:a:movabletype:movable_type_open_source:*
-
cpe:2.3:a:movabletype:movable_type_open_source:4.0
-
cpe:2.3:a:movabletype:movable_type_open_source:4.01
-
cpe:2.3:a:movabletype:movable_type_open_source:4.1
-
cpe:2.3:a:movabletype:movable_type_open_source:4.2
-
cpe:2.3:a:movabletype:movable_type_open_source:4.23
-
cpe:2.3:a:movabletype:movable_type_open_source:4.25
-
cpe:2.3:a:movabletype:movable_type_open_source:4.26
-
cpe:2.3:a:movabletype:movable_type_open_source:4.261
-
cpe:2.3:a:movabletype:movable_type_open_source:4.3
-
cpe:2.3:a:movabletype:movable_type_open_source:4.31
-
cpe:2.3:a:movabletype:movable_type_open_source:4.32
-
cpe:2.3:a:movabletype:movable_type_open_source:4.33
-
cpe:2.3:a:movabletype:movable_type_open_source:4.34
-
cpe:2.3:a:movabletype:movable_type_open_source:4.35
-
cpe:2.3:a:movabletype:movable_type_open_source:4.36
-
cpe:2.3:a:movabletype:movable_type_open_source:4.361
-
cpe:2.3:a:movabletype:movable_type_open_source:5.02
-
cpe:2.3:a:movabletype:movable_type_open_source:5.03
-
cpe:2.3:a:movabletype:movable_type_open_source:5.031
-
cpe:2.3:a:movabletype:movable_type_open_source:5.04
-
cpe:2.3:a:movabletype:movable_type_open_source:5.05
-
cpe:2.3:a:movabletype:movable_type_open_source:5.051
-
cpe:2.3:a:movabletype:movable_type_open_source:5.06
-
cpe:2.3:a:movabletype:movable_type_open_source:5.1
-
cpe:2.3:a:movabletype:movable_type_open_source:5.11
-
cpe:2.3:a:movabletype:movable_type_open_source:5.12
-
cpe:2.3:a:movabletype:movable_type_pro:*
-
cpe:2.3:a:movabletype:movable_type_pro:4.0
-
cpe:2.3:a:movabletype:movable_type_pro:4.01
-
cpe:2.3:a:movabletype:movable_type_pro:4.1
-
cpe:2.3:a:movabletype:movable_type_pro:4.2
-
cpe:2.3:a:movabletype:movable_type_pro:4.23
-
cpe:2.3:a:movabletype:movable_type_pro:4.25
-
cpe:2.3:a:movabletype:movable_type_pro:4.26
-
cpe:2.3:a:movabletype:movable_type_pro:4.261
-
cpe:2.3:a:movabletype:movable_type_pro:4.3
-
cpe:2.3:a:movabletype:movable_type_pro:4.31
-
cpe:2.3:a:movabletype:movable_type_pro:4.32
-
cpe:2.3:a:movabletype:movable_type_pro:4.33
-
cpe:2.3:a:movabletype:movable_type_pro:4.34
-
cpe:2.3:a:movabletype:movable_type_pro:4.35
-
cpe:2.3:a:movabletype:movable_type_pro:4.36
-
cpe:2.3:a:movabletype:movable_type_pro:4.361
-
cpe:2.3:a:movabletype:movable_type_pro:5.02
-
cpe:2.3:a:movabletype:movable_type_pro:5.03
-
cpe:2.3:a:movabletype:movable_type_pro:5.031
-
cpe:2.3:a:movabletype:movable_type_pro:5.04
-
cpe:2.3:a:movabletype:movable_type_pro:5.05
-
cpe:2.3:a:movabletype:movable_type_pro:5.051
-
cpe:2.3:a:movabletype:movable_type_pro:5.06
-
cpe:2.3:a:movabletype:movable_type_pro:5.1
-
cpe:2.3:a:movabletype:movable_type_pro:5.11
-
cpe:2.3:a:movabletype:movable_type_pro:5.12