CVE-2006-5080
CVE-2006-5080
Cross-site scripting (XSS) vulnerability in the search function in Six Apart Movable Type 3.3 to 3.32, and Movable Type Enterprise 1.01 and 1.02, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected products
n/a · n/aWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →References
http://jvn.jp/jp/JVN%2368295640/index.htmlhttp://secunia.com/advisories/22109https://exchange.xforce.ibmcloud.com/vulnerabilities/29183http://www.osvdb.org/29177http://www.securityfocus.com/bid/20228http://www.sixapart.com/movabletype/news/2006/09/mt_333-mte_103_updates.htmlhttp://www.vupen.com/english/advisories/2006/3779