Multiple Movable Type Products Multiple HTML Injection Vulnerabilities

Bugtraq ID:	64657
Class:	Input Validation Error
CVE:	CVE-2014-0977
Remote:	Yes
Local:	No
Published:	Nov 15 2013 12:00AM
Updated:	Jan 14 2014 02:02AM
Credit:	The vendor reported these issues.
Vulnerable:	Movable Type Movable Type Open Source 5.04 Movable Type Movable Type Open Source 5.03 Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64
Not Vulnerable:

Multiple Movable Type Products Multiple HTML Injection Vulnerabilities

Multiple Movable Type Products are prone to multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input.

Attacker-supplied HTML or JavaScript code could run in the context of the affected site, potentially allowing the attacker to steal cookie-based authentication credentials and control how the site is rendered to the user; other attacks are also possible.

The following Movable Type products are vulnerable:

Movable Type pro 6.0, 5.2.x, 5.1x, 5.0x
Movable Type Open Source (MTOS) 5.2.x, 5.1x, 5.0x
Movable Type Enterprise 5.2.x, 5.1x, 5.0x

Multiple Movable Type Products Multiple HTML Injection Vulnerabilities

An attacker can exploit these issues using a web browser.

Multiple Movable Type Products Multiple HTML Injection Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Multiple Movable Type Products Multiple HTML Injection Vulnerabilities

References:

• Movable Type Homepage (Movable Type)