VYPR

Movable Type Advanced

by Movabletype

CVEs (27)

  • CVE-2021-20837CriOct 26, 2021
    Movabletype
    Movable Type Advanced
    risk 0.74cvss 9.8epss 0.88

    Movable Type 7 r.5002 and earlier (Movable Type 7 Series), Movable Type 6.8.2 and earlier (Movable Type 6 Series), Movable Type Advanced 7 r.5002 and earlier (Movable Type Advanced 7 Series), Movable Type Advanced 6.8.2 and earlier (Movable Type Advanced 6 Series), Movable Type…

  • CVE-2022-38078CriAug 24, 2022
    Movabletype
    Movable Type Advanced
    risk 0.64cvss 9.8epss 0.02

    Movable Type XMLRPC API provided by Six Apart Ltd. contains a command injection vulnerability. Sending a specially crafted message by POST method to Movable Type XMLRPC API may allow arbitrary Perl script execution, and an arbitrary OS command may be executed through it.…

  • CVE-2016-5742CriJan 23, 2017
    Movabletype
    Movable Type Open Source
    risk 0.64cvss 9.8epss 0.02

    SQL injection vulnerability in the XML-RPC interface in Movable Type Pro and Advanced 6.x before 6.1.3 and 6.2.x before 6.2.6 and Movable Type Open Source 5.2.13 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2020-5577HigMay 14, 2020
    Movabletype
    Movable Type Advanced
    risk 0.57cvss 8.8epss 0.02

    Movable Type series (Movable Type 7 r.4606 (7.2.1) and earlier (Movable Type 7), Movable Type Advanced 7 r.4606 (7.2.1) and earlier (Movable Type Advanced 7), Movable Type for AWS 7 r.4606 (7.2.1) and earlier (Movable Type for AWS 7), Movable Type 6.5.3 and earlier (Movable Type…

  • CVE-2020-5576HigMay 14, 2020
    Movabletype
    Movable Type Advanced
    risk 0.57cvss 8.8epss 0.01

    Cross-site request forgery (CSRF) vulnerability in Movable Type series (Movable Type 7 r.4606 (7.2.1) and earlier (Movable Type 7), Movable Type Advanced 7 r.4606 (7.2.1) and earlier (Movable Type Advanced 7), Movable Type for AWS 7 r.4606 (7.2.1) and earlier (Movable Type for…

  • CVE-2022-43660HigDec 7, 2022
    Movabletype
    Movable Type Advanced
    risk 0.47cvss 7.2epss 0.01

    Improper neutralization of Server-Side Includes (SSW) within a web page in Movable Type series allows a remote authenticated attacker with Privilege of 'Manage of Content Types' may execute an arbitrary Perl script and/or an arbitrary OS command. Affected products/versions are…

  • CVE-2022-45113MedDec 7, 2022
    Movabletype
    Movable Type Advanced
    risk 0.42cvss 6.5epss 0.01

    Improper validation of syntactic correctness of input vulnerability exist in Movable Type series. Having a user to access a specially crafted URL may allow a remote unauthenticated attacker to set a specially crafted URL to the Reset Password page and conduct a phishing attack.…

  • CVE-2022-45122MedDec 7, 2022
    Movabletype
    Movable Type Advanced
    risk 0.40cvss 6.1epss 0.01

    Cross-site scripting vulnerability in Movable Type Movable Type 7 r.5301 and earlier (Movable Type 7 Series), Movable Type Advanced 7 r.5301 and earlier (Movable Type Advanced 7 Series), Movable Type 6.8.7 and earlier (Movable Type 6 Series), Movable Type Advanced 6.8.7 and…

  • CVE-2021-20815MedAug 26, 2021
    Movabletype
    Movable Type Advanced
    risk 0.40cvss 6.1epss 0.01

    Cross-site scripting vulnerability in Edit Boilerplate screen of Movable Type (Movable Type 7 r.4903 and earlier (Movable Type 7 Series), Movable Type 6.8.0 and earlier (Movable Type 6 Series), Movable Type Advanced 7 r.4903 and earlier (Movable Type Advanced 7 Series), Movable…

  • CVE-2021-20813MedAug 26, 2021
    Movabletype
    Movable Type Advanced
    risk 0.40cvss 6.1epss 0.01

    Cross-site scripting vulnerability in Edit screen of Content Data of Movable Type (Movable Type 7 r.4903 and earlier (Movable Type 7 Series) and Movable Type Advanced 7 r.4903 and earlier (Movable Type Advanced 7 Series)) allows remote attackers to inject arbitrary script or…

  • CVE-2021-20812MedAug 26, 2021
    Movabletype
    Movable Type Advanced
    risk 0.40cvss 6.1epss 0.01

    Cross-site scripting vulnerability in Setting screen of Server Sync of Movable Type (Movable Type Advanced 7 r.4903 and earlier (Movable Type Advanced 7 Series) and Movable Type Premium Advanced 1.44 and earlier) allows remote attackers to inject arbitrary script or HTML via…

  • CVE-2021-20811MedAug 26, 2021
    Movabletype
    Movable Type Advanced
    risk 0.40cvss 6.1epss 0.01

    Cross-site scripting vulnerability in List of Assets screen of Movable Type (Movable Type 7 r.4903 and earlier (Movable Type 7 Series), Movable Type 6.8.0 and earlier (Movable Type 6 Series), Movable Type Advanced 7 r.4903 and earlier (Movable Type Advanced 7 Series), Movable…

  • CVE-2021-20810MedAug 26, 2021
    Movabletype
    Movable Type Advanced
    risk 0.40cvss 6.1epss 0.01

    Cross-site scripting vulnerability in Website Management screen of Movable Type (Movable Type 7 r.4903 and earlier (Movable Type 7 Series), Movable Type 6.8.0 and earlier (Movable Type 6 Series), Movable Type Advanced 7 r.4903 and earlier (Movable Type Advanced 7 Series),…

  • CVE-2021-20809MedAug 26, 2021
    Movabletype
    Movable Type Advanced
    risk 0.40cvss 6.1epss 0.01

    Cross-site scripting vulnerability in Create screens of Entry, Page, and Content Type of Movable Type (Movable Type 7 r.4903 and earlier (Movable Type 7 Series), Movable Type 6.8.0 and earlier (Movable Type 6 Series), Movable Type Advanced 7 r.4903 and earlier (Movable Type…

  • CVE-2021-20808MedAug 26, 2021
    Movabletype
    Movable Type Advanced
    risk 0.40cvss 6.1epss 0.01

    Cross-site scripting vulnerability in Search screen of Movable Type (Movable Type 7 r.4903 and earlier (Movable Type 7 Series), Movable Type 6.8.0 and earlier (Movable Type 6 Series), Movable Type Advanced 7 r.4903 and earlier (Movable Type Advanced 7 Series), Movable Type…

  • CVE-2021-20665MedMar 5, 2021
    Movabletype
    Movable Type Advanced
    risk 0.40cvss 6.1epss 0.01

    Cross-site scripting vulnerability in in Add asset screen of Contents field of Movable Type 7 r.4705 and earlier (Movable Type 7 Series), Movable Type Advanced 7 r.4705 and earlier (Movable Type Advanced 7 Series), Movable Type Premium 1.39 and earlier, and Movable Type Premium…

  • CVE-2021-20664MedMar 5, 2021
    Movabletype
    Movable Type Advanced
    risk 0.40cvss 6.1epss 0.01

    Cross-site scripting vulnerability in in Asset registration screen of Movable Type 7 r.4705 and earlier (Movable Type 7 Series), Movable Type Advanced 7 r.4705 and earlier (Movable Type Advanced 7 Series), Movable Type 6.7.5 and earlier (Movable Type 6.7 Series), Movable Type…

  • CVE-2021-20663MedMar 5, 2021
    Movabletype
    Movable Type Advanced
    risk 0.40cvss 6.1epss 0.01

    Cross-site scripting vulnerability in in Role authority setting screen of Movable Type 7 r.4705 and earlier (Movable Type 7 Series), Movable Type Advanced 7 r.4705 and earlier (Movable Type Advanced 7 Series), Movable Type 6.7.5 and earlier (Movable Type 6.7 Series), Movable…

  • CVE-2020-5575MedMay 14, 2020
    Movabletype
    Movable Type Advanced
    risk 0.40cvss 6.1epss 0.01

    Cross-site scripting vulnerability in Movable Type series (Movable Type 7 r.4606 (7.2.1) and earlier (Movable Type 7), Movable Type Advanced 7 r.4606 (7.2.1) and earlier (Movable Type Advanced 7), Movable Type for AWS 7 r.4606 (7.2.1) and earlier (Movable Type for AWS 7),…

  • CVE-2019-6025MedDec 26, 2019
    Movabletype
    Movable Type Advanced
    risk 0.40cvss 6.1epss 0.01

    Open redirect vulnerability in Movable Type series Movable Type 7 r.4602 (7.1.3) and earlier (Movable Type 7), Movable Type 6.5.0 and 6.5.1 (Movable Type 6.5), Movable Type 6.3.9 and earlier (Movable Type 6.3.x, 6.2.x, 6.1.x, 6.0.x), Movable Type Advanced 7 r.4602 (7.1.3) and…

Page 1 of 2