| Package | Affected versions | Patched versions |
|---|---|---|
| movable type | = 1.54= 2.6= 2.63= 3.16= 3.17= 3.3= 3.32= 3.33= 3.36= 4.20= 4.25 | |
| movable type | = 1.00= 1.1= 1.2= 1.3= 1.31= 1.4= 1.5= 3.01d= 3.0d= 3.1= 3.11= 3.12= 3.14= 3.15= 3.16= 3.17= 3.2= 3.3= 3.32= 3.33= 3.34= 3.35= 4.0= 4.01= 4.1= 4.12= 4.2= 4.21= 4.23= 4.25≤ 4.26 |
mt-wizard.cgi in Six Apart Movable Type before 4.261, when global templates are not initialized, allows remote attackers to bypass access restrictions and (1) send e-mail to arbitrary addresses or (2) obtain sensitive information via unspecified vectors.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free