CVE

Id
54505  
CVE No.
CVE-2012-1262  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in cgi-bin/mt/mt-wizard.cgi in Movable Type before 4.38, 5.0x before 5.07, and 5.1x before 5.13, when the product is incompletely installed, allows remote attackers to inject arbitrary web script or HTML via the dbuser parameter, a different vulnerability than CVE-2012-0318.  
Phase
Assigned (20120222)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
572403 54505 CVE-2012-1262 FULLDISC:20120224 TWSL2012-003: Cross-Site Scripting Vulnerability in Movable Type Publishing Platform  View
572404 54505 CVE-2012-1262 URL:http://seclists.org/fulldisclosure/2012/Feb/407  View
572405 54505 CVE-2012-1262 MISC:https://www.trustwave.com/spiderlabs/advisories/TWSL2012-003.txt  View
572406 54505 CVE-2012-1262 MISC:http://packetstormsecurity.org/files/110203/Movable-Type-Publishing-Platform-Cross-Site-Scripting.html  View
572407 54505 CVE-2012-1262 CONFIRM:http://www.movabletype.org/2012/02/movable_type_513_507_and_438_security_updates.html  View
572408 54505 CVE-2012-1262 CONFIRM:http://www.movabletype.org/documentation/appendices/release-notes/513.html  View
572409 54505 CVE-2012-1262 JVN:JVN#49836527  View
572410 54505 CVE-2012-1262 URL:http://jvn.jp/en/jp/JVN49836527/index.html  View
572411 54505 CVE-2012-1262 JVNDB:JVNDB-2012-000016  View
572412 54505 CVE-2012-1262 URL:http://jvndb.jvn.jp/jvndb/JVNDB-2012-000016  View
572413 54505 CVE-2012-1262 BID:52138  View
572414 54505 CVE-2012-1262 URL:http://www.securityfocus.com/bid/52138  View
572415 54505 CVE-2012-1262 OSVDB:79470  View
572416 54505 CVE-2012-1262 URL:http://osvdb.org/79470  View
572417 54505 CVE-2012-1262 SECTRACK:1026738  View
572418 54505 CVE-2012-1262 URL:http://www.securitytracker.com/id?1026738  View
572419 54505 CVE-2012-1262 XF:movable-type-mtwizard-xss(73411)  View
572420 54505 CVE-2012-1262 URL:http://xforce.iss.net/xforce/xfdb/73411  View
572421 54505 CVE-2012-1262 XF:movable-type-publishing-mtwizard-xss(73480)  View

Related JVN