CVE-2006-5080: XSS

Published Sep 29, 2006

Updated

Cross-site scripting (XSS) vulnerability in the search function in Six Apart Movable Type 3.3 to 3.32, and Movable Type Enterprise 1.01 and 1.02, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected Software

4 affected components

Six Apart Movable Type=3.3

Six Apart Movable Type=enterprise_1.02

Six Apart Movable Type=enterprise_1.01

Six Apart Movable Type=3.32

Remediation

Patch Available

http://www.sixapart.com/movabletype/news/2006/09/mt_333-mte_103_updates.html

Event History

Sep 29, 2006

CVE Published

12:07 AM

Data Sourced

via NVD·12:07 AM

RemedyDescriptionSeverityWeaknessAffected Software

CVE Published

via MITRE·04:00 AM

Data Sourced

via MITRE·04:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2006-5080?

CVE-2006-5080 is classified as a high severity vulnerability due to its potential for allowing arbitrary web script injection.

How do I fix CVE-2006-5080?

To fix CVE-2006-5080, upgrade to Movable Type version 3.33 or later or Movable Type Enterprise version 1.03 or later.

What software is affected by CVE-2006-5080?

CVE-2006-5080 affects Six Apart Movable Type versions 3.3 to 3.32 and Movable Type Enterprise versions 1.01 and 1.02.

What type of vulnerability is CVE-2006-5080?

CVE-2006-5080 is a cross-site scripting (XSS) vulnerability that allows attackers to inject scripts into web pages.

Can CVE-2006-5080 be exploited remotely?

Yes, CVE-2006-5080 can be exploited remotely by attackers to execute arbitrary scripts.