CVE-2008-5808: XSS
First published: Fri Jan 02 2009(Updated: )
Cross-site scripting (XSS) vulnerability in Six Apart Movable Type Enterprise (MTE) 1.x before 1.56; Movable Type (MT) 3.x before 3.38; and Movable Type, Movable Type Open Source (MTOS), and Movable Type Enterprise 4.x before 4.23 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly related to "application management."
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Movable Type | =4 | |
| Movable Type | =4-unknown | |
| Movable Type | =4-unknown | |
| Movable Type | =4.20 | |
| Movable Type | =4.20-unknown | |
| Movable Type | =4.20-unknown | |
| Six Apart Movable Type | =1.00 | |
| Six Apart Movable Type | =1.1 | |
| Six Apart Movable Type | =1.2 | |
| Six Apart Movable Type | =1.3 | |
| Six Apart Movable Type | =1.4 | |
| Six Apart Movable Type | =1.5 | |
| Six Apart Movable Type | =1.31 | |
| Six Apart Movable Type | =3.0d | |
| Six Apart Movable Type | =3.1 | |
| Six Apart Movable Type | =3.01d | |
| Six Apart Movable Type | =3.2 | |
| Six Apart Movable Type | =3.3 | |
| Six Apart Movable Type | =3.11 | |
| Six Apart Movable Type | =3.12 | |
| Six Apart Movable Type | =3.14 | |
| Six Apart Movable Type | =3.15 | |
| Six Apart Movable Type | =3.16 | |
| Six Apart Movable Type | =3.17 | |
| Six Apart Movable Type | =3.32 | |
| Six Apart Movable Type | =3.33 | |
| Six Apart Movable Type | =3.34 | |
| Six Apart Movable Type | =3.35 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2008-5808?
CVE-2008-5808 has been classified as a high severity cross-site scripting vulnerability.
How do I fix CVE-2008-5808?
To fix CVE-2008-5808, upgrade Movable Type to version 1.56 or later for MTE, or 3.38 or later for MT 3.x, or 4.23 or later for MT 4.x.
Which versions are affected by CVE-2008-5808?
CVE-2008-5808 affects Six Apart Movable Type Enterprise 1.x before 1.56, Movable Type 3.x before 3.38, and Movable Type 4.x before 4.23.
What type of vulnerability is CVE-2008-5808?
CVE-2008-5808 is a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML.
Can CVE-2008-5808 lead to data theft?
Yes, if exploited, CVE-2008-5808 could allow remote attackers to steal sensitive information from unsuspecting users.
- agent/references
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/author
- agent/last-modified-date
- agent/description
- agent/event
- agent/first-publish-date
- agent/source
- agent/weakness
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-historical
- vendor/six apart
- canonical/movable type
- version/movable type/4
- version/movable type/4-unknown
- version/movable type/4.20
- version/movable type/4.20-unknown
- vendor/sixapart
- canonical/six apart movable type
- version/six apart movable type/1.00
- version/six apart movable type/1.1
- version/six apart movable type/1.2
- version/six apart movable type/1.3
- version/six apart movable type/1.4
- version/six apart movable type/1.5
- version/six apart movable type/1.31
- version/six apart movable type/3.0d
- version/six apart movable type/3.1
- version/six apart movable type/3.01d
- version/six apart movable type/3.2
- version/six apart movable type/3.3
- version/six apart movable type/3.11
- version/six apart movable type/3.12
- version/six apart movable type/3.14
- version/six apart movable type/3.15
- version/six apart movable type/3.16
- version/six apart movable type/3.17
- version/six apart movable type/3.32
- version/six apart movable type/3.33
- version/six apart movable type/3.34
- version/six apart movable type/3.35