CVE-2009-2492

LOW 2.6CVE-2009-2492 · Published 17/07/2009 · updated 16/06/2026

In short

CVE-2009-2492 is a LOW (CVSS 2.6) vulnerability affecting movable type (six apart), movable type (six apart ltd), movable type (sixapart).
Chance of exploitation in the next 30 days (EPSS): 1.1%, higher than 65.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
movable type six_apart	`= 1.54= 2.6= 2.63= 3.16= 3.17= 3.3= 3.32= 3.33= 3.36= 4= 4.20≤ 4.25`	No fix yet
movable type six_apart_ltd	`= 3.33`	No fix yet
movable type sixapart	`= 1.00= 1.1= 1.2= 1.3= 1.31= 1.4= 1.5= 3.01d= 3.0d= 3.1= 3.11= 3.12= 3.14= 3.15= 3.16= 3.17= 3.2= 3.3= 3.32= 3.33= 3.34= 3.35= 4.0= 4.01= 4.1= 4.12= 4.2= 4.21= 4.23`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in mt-wizard.cgi in Six Apart Movable Type before 4.261 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2009-2480.

References

jvn.jp/en/jp/JVN86472161/index.html
jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000042.html · Patch
secunia.com/advisories/35534 · Vendor Advisory
securityfocus.com/bid/35885
vupen.com/english/advisories/2009/1668 · Patch

More vulnerabilities in movable type

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

In short

CVE-2009-2492 is a LOW (CVSS 2.6) vulnerability affecting movable type (six apart), movable type (six apart ltd), movable type (sixapart).

Chance of exploitation in the next 30 days (EPSS): 1.1%, higher than 65.2% of all vulnerabilities.

No patched version is listed yet: follow the vendor's advisory in References.

Package

Affected versions

Patched versions

movable type

six_apart

= 1.54= 2.6= 2.63= 3.16= 3.17= 3.3= 3.32= 3.33= 3.36= 4= 4.20≤ 4.25

No fix yet

movable type

six_apart_ltd

= 3.33

No fix yet

movable type

sixapart

= 1.00= 1.1= 1.2= 1.3= 1.31= 1.4= 1.5= 3.01d= 3.0d= 3.1= 3.11= 3.12= 3.14= 3.15= 3.16= 3.17= 3.2= 3.3= 3.32= 3.33= 3.34= 3.35= 4.0= 4.01= 4.1= 4.12= 4.2= 4.21= 4.23

No fix yet

More vulnerabilities in movable type

See all →