Movable Type Prior to Version 4.23 Unspecified Cross-Site Scripting Vulnerability
BID:33163
Info
Movable Type Prior to Version 4.23 Unspecified Cross-Site Scripting Vulnerability
| Bugtraq ID: | 33163 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 03 2008 12:00AM |
| Updated: | Jan 08 2009 02:22PM |
| Credit: | JVN |
| Vulnerable: |
Movable Type Movable Type Enterprise 4.22 Movable Type Movable Type Enterprise 4 Movable Type Movable Type Enterprise 1.55 Movable Type Movable Type Enterprise 1.5 Movable Type Movable Type Enterprise 1.03 Movable Type Movable Type Enterprise 1.02 Movable Type Movable Type Enterprise 1.01 Movable Type Movable Type Community Solution 4.22 Movable Type Movable Type Community Solution 4 Movable Type Movable Type Community Solution 1.51 Movable Type Movable Type Commercial 4.22 Movable Type Movable Type 3.17 Movable Type Movable Type 3.16 Movable Type Movable Type 3.2 Movable Type Movable Type 2.63 Movable Type Movable Type 2.0 Movable Type Movable Type 4.22 Movable Type Movable Type 4.21 Movable Type Movable Type 4.13 Movable Type Movable Type 4.01 Movable Type Movable Type 3.36 Movable Type Movable Type 3.34.b1 Movable Type Movable Type 3.34 Movable Type Movable Type 3.33 Movable Type Movable Type 3.32 Movable Type Movable Type 3.31 Movable Type Movable Type 3.3 |
| Not Vulnerable: |
Movable Type Movable Type Enterprise 4.23 Movable Type Movable Type Enterprise 1.56 Movable Type Movable Type Community Solution 4.23 Movable Type Movable Type 4.23 Movable Type Movable Type 3.38 |
Discussion
Movable Type Prior to Version 4.23 Unspecified Cross-Site Scripting Vulnerability
Movable Type is prone to an unspecified cross-site scripting vulnerability because the application fails to sufficiently sanitize user-supplied data.
An attacker can leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.
NOTE: This issue is different from the one described in BID 32604.
Versions prior to Movable Type 4.23 are affected.
Movable Type is prone to an unspecified cross-site scripting vulnerability because the application fails to sufficiently sanitize user-supplied data.
An attacker can leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.
NOTE: This issue is different from the one described in BID 32604.
Versions prior to Movable Type 4.23 are affected.
Exploit / POC
Movable Type Prior to Version 4.23 Unspecified Cross-Site Scripting Vulnerability
An attacker can exploit this issue by enticing an unsuspecting user to follow a malicious URI.
An attacker can exploit this issue by enticing an unsuspecting user to follow a malicious URI.
Solution / Fix
Movable Type Prior to Version 4.23 Unspecified Cross-Site Scripting Vulnerability
Solution:
The vendor has released Movable Type 4.23 to address this issue. Please contact the vendor for details.
Solution:
The vendor has released Movable Type 4.23 to address this issue. Please contact the vendor for details.
References
Movable Type Prior to Version 4.23 Unspecified Cross-Site Scripting Vulnerability
References:
References:
- Movable Type Home Page (Six Apart)
- JVN#71945722 (JVN)
- Movable Type 4.23 (Movable Type)