CVE-2006-5080: XSS
First published: Fri Sep 29 2006(Updated: )
Cross-site scripting (XSS) vulnerability in the search function in Six Apart Movable Type 3.3 to 3.32, and Movable Type Enterprise 1.01 and 1.02, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Movable Type | =3.3 | |
| Movable Type | =enterprise_1.02 | |
| Movable Type | =enterprise_1.01 | |
| Movable Type | =3.32 | |
| =3.3 | ||
| =3.32 | ||
| =enterprise_1.01 | ||
| =enterprise_1.02 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://jvn.jp/jp/JVN%2368295640/index.html
- http://www.sixapart.com/movabletype/news/2006/09/mt_333-mte_103_updates.html
- http://secunia.com/advisories/22109
- http://www.securityfocus.com/bid/20228
- http://www.osvdb.org/29177
- http://www.vupen.com/english/advisories/2006/3779
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29183
Frequently Asked Questions
What is the severity of CVE-2006-5080?
CVE-2006-5080 is classified as a high severity vulnerability due to its potential for allowing arbitrary web script injection.
How do I fix CVE-2006-5080?
To fix CVE-2006-5080, upgrade to Movable Type version 3.33 or later or Movable Type Enterprise version 1.03 or later.
What software is affected by CVE-2006-5080?
CVE-2006-5080 affects Six Apart Movable Type versions 3.3 to 3.32 and Movable Type Enterprise versions 1.01 and 1.02.
What type of vulnerability is CVE-2006-5080?
CVE-2006-5080 is a cross-site scripting (XSS) vulnerability that allows attackers to inject scripts into web pages.
Can CVE-2006-5080 be exploited remotely?
Yes, CVE-2006-5080 can be exploited remotely by attackers to execute arbitrary scripts.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/severity
- agent/remedy
- agent/author
- agent/first-publish-date
- agent/description
- agent/weakness
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/last-modified-date
- agent/source
- agent/softwarecombine
- agent/tags
- agent/event
- vendor/six apart
- canonical/movable type
- version/movable type/3.3
- version/movable type/enterprise_1.02
- version/movable type/enterprise_1.01
- version/movable type/3.32