Vulnerabilidades do Six Apart Ltd. Movable Type
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Six Apart Ltd. Movable Type: 5 registro(s), com versões afetadas e correções.cpe:2.3:a:sixapart:movable_type
CVE-2026-96408
Crítica · 9.4
CWE-94 07/10/2026
Code Injection em Six Apart Ltd. Movable Type (Cloud Edition)
A code injection vulnerability exists in the upgrade script of Movable Type, which may allow an unauthenticated attacker to execute an arbitrary Perl script or an SQL query on the affected product.
CVE-2026-103668
Alta · 8.6
CWE-89 07/10/2026
SQL Injection em Six Apart Ltd. Movable Type (Cloud Edition)
An SQL Injection vulnerability exists in the Site Search function of Movable Type, which may allow an unauthenticated attacker to execute an arbitrary SQL query on the affected product.
CVE-2026-44392
Média · 4.3
CWE-862 20/05/2026
Missing Authorization em Six Apart Ltd. Movable Type
Missing authorization vulnerability exists in Movable Type. Under certain conditions, when a user without administrator privileges signs in to the product, unintended update processing may be executed.
CVE-2026-33088
Crítica · 9.8
CWE-89 08/04/2026
SQL Injection em Six Apart Ltd. Movable Type
Movable Type provided by Six Apart Ltd. contains an SQL Injection vulnerability which may allow an attacker to execute an arbitrary SQL statement.
CVE-2026-25776
Crítica · 9.8
CWE-94 08/04/2026
Code Injection em Six Apart Ltd. Movable Type
Movable Type provided by Six Apart Ltd. contains a code injection vulnerability which may allow an attacker to execute arbitrary Perl script.