CVE-2011-5084: XSS
Published Apr 2, 2012
·Updated
Cross-site scripting (XSS) vulnerability in Movable Type 4.x before 4.36 and 5.x before 5.05 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
55 affected components
Sixapart Movable Type=4.0
Sixapart Movable Type=4.1-beta2
Sixapart Movable Type=4.24
Sixapart Movable Type=4.1-beta
Sixapart Movable Type=4.2-rc5
Sixapart Movable Type=4.0-beta6
Sixapart Movable Type=4.23
Sixapart Movable Type=4.36
Sixapart Movable Type=4.0-rc2
Sixapart Movable Type=4.261
Sixapart Movable Type=4.0-beta4
Sixapart Movable Type=4.35
Sixapart Movable Type=4.29
Sixapart Movable Type=4.26
Sixapart Movable Type=4.15-beta4
Sixapart Movable Type=4.0-beta5
Sixapart Movable Type=4.0-beta7
Sixapart Movable Type=4.0-rc1
Sixapart Movable Type=4.0-beta
Sixapart Movable Type=4.21
Sixapart Movable Type=4.12
Sixapart Movable Type=4.2
Sixapart Movable Type=4.291
Sixapart Movable Type=4.0-rc3
Sixapart Movable Type=4.2-rc4
Sixapart Movable Type=4.27
Sixapart Movable Type=4.28
Sixapart Movable Type=4.15-beta3
Sixapart Movable Type=4.01-beta
Sixapart Movable Type=4.25
Sixapart Movable Type=4.01
Sixapart Movable Type=4.2-rc2
Sixapart Movable Type=4.0-beta3
Sixapart Movable Type=4.292
Sixapart Movable Type=4.15-beta1
Sixapart Movable Type=4.22
Sixapart Movable Type=4.1
Sixapart Movable Type=4.1-rc1
Sixapart Movable Type=4.01-rc1
Sixapart Movable Type=4.01-beta2
Sixapart Movable Type=4.0-beta2
Sixapart Movable Type=5.05
Sixapart Movable Type=5.031
Sixapart Movable Type=5.03
Sixapart Movable Type=5.0-beta1
Sixapart Movable Type=5.01
Sixapart Movable Type=5.0-rc1
Sixapart Movable Type=5.04
Sixapart Movable Type=5.0
Sixapart Movable Type=5.0-beta4
Sixapart Movable Type=5.0-rc3
Sixapart Movable Type=5.0-rc2
Sixapart Movable Type=5.02
Sixapart Movable Type=5.0-beta2
Sixapart Movable Type=5.0-beta3
Remediation
Event History
Apr 2, 2012
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-5084?
CVE-2011-5084 is classified as a potentially high severity due to its ability to exploit a cross-site scripting (XSS) vulnerability.
2
How do I fix CVE-2011-5084?
To fix CVE-2011-5084, you should upgrade Movable Type to versions 4.36 or 5.05 or later.
3
What types of attacks can CVE-2011-5084 enable?
CVE-2011-5084 can enable remote attackers to inject arbitrary web scripts or HTML, potentially leading to session hijacking or data theft.
4
Which versions of Movable Type are affected by CVE-2011-5084?
CVE-2011-5084 affects Movable Type versions 4.x before 4.36 and 5.x before 5.05.
5
Is there a specific patch for CVE-2011-5084?
There is no specific patch for CVE-2011-5084; upgrading to a vulnerable-free version is the recommended solution.