Movable Type Multiple Unspecified HTML Injection Vulnerabilities
BID:14912
Info
Movable Type Multiple Unspecified HTML Injection Vulnerabilities
| Bugtraq ID: | 14912 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 22 2005 12:00AM |
| Updated: | Jul 06 2007 03:37PM |
| Credit: | Tim Brown is credited with the discovery of this vulnerability. |
| Vulnerable: |
Movable Type Movable Type 3.17 |
| Not Vulnerable: |
Movable Type Movable Type 3.2 |
Discussion
Movable Type Multiple Unspecified HTML Injection Vulnerabilities
Movable Type is prone to multiple unspecified HTML-injection vulnerabilities because the application fails to properly sanitize user-supplied input.
Attacker-supplied HTML and script code would run in the context of the affected site, potentially allowing an attacker to steal cookie-based authentication credentials and to control how the site is rendered to the user; other attacks are also possible.
Movable Type is prone to multiple unspecified HTML-injection vulnerabilities because the application fails to properly sanitize user-supplied input.
Attacker-supplied HTML and script code would run in the context of the affected site, potentially allowing an attacker to steal cookie-based authentication credentials and to control how the site is rendered to the user; other attacks are also possible.
Exploit / POC
Movable Type Multiple Unspecified HTML Injection Vulnerabilities
No exploit is required.
No exploit is required.
Solution / Fix
Movable Type Multiple Unspecified HTML Injection Vulnerabilities
Solution:
The vendor has released version 3.2 to address this issue.
Movable Type Movable Type 3.17
Solution:
The vendor has released version 3.2 to address this issue.
Movable Type Movable Type 3.17
-
Movable Type MT-3.2-en_US.tar.gz
http://www.sixapart.com/movabletype/
References
Movable Type Multiple Unspecified HTML Injection Vulnerabilities
References:
References:
- Movable Type Change Log (Movable Type)
- Movable Type Homepage (Movable Type)