CVE-2008-5808

Published: Jan 2, 2009Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in Six Apart Movable Type Enterprise (MTE) 1.x before 1.56; Movable Type (MT) 3.x before 3.38; and Movable Type, Movable Type Open Source (MTOS), and Movable Type Enterprise 4.x before 4.23 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly related to "application management."

Affected (28)

Products: Six Apart: Movable Type · Sixapart: Movable Type

1 product

1 product

Configuration A

28 vulnerable

Vulnerable Software	Affected Versions
Six Apart Movable Type	Version 4.20
Six Apart Movable Type	Version 4.20 unknown
Six Apart Movable Type	Version 4.20 unknown
Six Apart Movable Type	Version 4
Six Apart Movable Type	Version 4 unknown
Six Apart Movable Type	Version 4 unknown
Sixapart Movable Type	Version 1.00
Sixapart Movable Type	Version 1.1
Sixapart Movable Type	Version 1.2
Sixapart Movable Type	Version 1.31
Sixapart Movable Type	Version 1.3
Sixapart Movable Type	Version 1.4
Sixapart Movable Type	Version 1.5
Sixapart Movable Type	Version 3.01d
Sixapart Movable Type	Version 3.0d
Sixapart Movable Type	Version 3.11
Sixapart Movable Type	Version 3.12
Sixapart Movable Type	Version 3.14
Sixapart Movable Type	Version 3.15
Sixapart Movable Type	Version 3.16
Sixapart Movable Type	Version 3.17
Sixapart Movable Type	Version 3.1
Sixapart Movable Type	Version 3.2
Sixapart Movable Type	Version 3.32
Sixapart Movable Type	Version 3.33
Sixapart Movable Type	Version 3.34
Sixapart Movable Type	Version 3.35
Sixapart Movable Type	Version 3.3