NVD

Id
52460  
Name
CVE-2007-0231  
Description
Cross-site scripting (XSS) vulnerability in Movable Type (MT) 3.33, when nofollow is disabled and unmoderated comments are enabled, allows remote attackers to inject arbitrary web script or HTML via the Comments field.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-01-12  
Modified Date
2011-03-07  
Seq
2007-0231  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
265028 52460 CVE-2007-0231 http://golem.ph.utexas.edu/~distler/blog/archives/001102.html  View
265029 52460 CVE-2007-0231 ADV-2007-0142  View
265030 52460 CVE-2007-0231 http://www.zackvision.com/weblog/2007/01/movabletype-security-bug.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
56249 JVNDB-2007-004941 MT におけるクロスサイトスクリプティングの脆弱性 Movable Type (MT) には、nofollow が無効になっている、および unmoderated comments が有効になっている際、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2007-0231 23586 CVE-2007-0231 52460 6.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004941.html 2007-01-12 2012-12-20 View