CVE-2011-3993

MEDIUM 5.5CVE-2011-3993 · Published 03/11/2011 · updated 16/06/2026

In short

CVE-2011-3993 is a MEDIUM (CVSS 5.5) vulnerability affecting autotagging (skyarc), duplicateentry (skyarc), mailpack (skyarc).
Chance of exploitation in the next 30 days (EPSS): 1.1%, higher than 66.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
autotagging skyarc	`≤ 0.08`	No fix yet
duplicateentry skyarc	`≤ 1.2`	No fix yet
mailpack skyarc	`≤ 1.741`	No fix yet
mtcms skyarc	`= 5.2= 5.21= 5.22= 5.23= 5.24= 5.25= 5.251≤ 5.251`	No fix yet
multifileuploader skyarc	`≤ 0.44`	No fix yet

Description

SKYARC MTCMS before 5.252, and the MultiFileUploader 0.44 and earlier, DuplicateEntry 1.2 and earlier, MailPack 1.741 and earlier, and AutoTagging 0.08 and earlier plugins for Movable Type, uses weak permissions, which allows remote authenticated users to modify files and settings via unspecified vectors.

References

More vulnerabilities in autotagging

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free