CVE-2009-2481

Published: Jul 16, 2009Modified: Apr 23, 2026

5.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

Exploitability: 8.6 / Impact: 4.9

Source: NVD

Description

mt-wizard.cgi in Six Apart Movable Type before 4.261, when global templates are not initialized, allows remote attackers to bypass access restrictions and (1) send e-mail to arbitrary addresses or (2) obtain sensitive information via unspecified vectors.

Affected (57)

Products: Six Apart: Movable Type · Sixapart: Movable Type

1 product

1 product

Configuration A

57 vulnerable

Vulnerable Software	Affected Versions
Six Apart Movable Type	Version 1.54
Six Apart Movable Type	Version 2.63
Six Apart Movable Type	Version 2.6
Six Apart Movable Type	Version 3.16
Six Apart Movable Type	Version 3.17
Six Apart Movable Type	Version 3.32
Six Apart Movable Type	Version 3.33
Six Apart Movable Type	Version 3.36
Six Apart Movable Type	Version 3.3
Six Apart Movable Type	Version 4.20
Six Apart Movable Type	Version 4.20
Six Apart Movable Type	Version 4.20
Six Apart Movable Type	Version 4.20
Six Apart Movable Type	Version 4.25
Sixapart Movable Type	Up to 4.26
Sixapart Movable Type	Version 1.00
Sixapart Movable Type	Version 1.1
Sixapart Movable Type	Version 1.2
Sixapart Movable Type	Version 1.31
Sixapart Movable Type	Version 1.3
Sixapart Movable Type	Version 1.4
Sixapart Movable Type	Version 1.5
Sixapart Movable Type	Version 3.01d
Sixapart Movable Type	Version 3.0d
Sixapart Movable Type	Version 3.11
Sixapart Movable Type	Version 3.12
Sixapart Movable Type	Version 3.14
Sixapart Movable Type	Version 3.15
Sixapart Movable Type	Version 3.16
Sixapart Movable Type	Version 3.17
Sixapart Movable Type	Version 3.1
Sixapart Movable Type	Version 3.2
Sixapart Movable Type	Version 3.32
Sixapart Movable Type	Version 3.33
Sixapart Movable Type	Version 3.34
Sixapart Movable Type	Version 3.35
Sixapart Movable Type	Version 3.3
Sixapart Movable Type	Version 4.01
Sixapart Movable Type	Version 4.01
Sixapart Movable Type	Version 4.01 b
Sixapart Movable Type	Version 4.01 b
Sixapart Movable Type	Version 4.0
Sixapart Movable Type	Version 4.0
Sixapart Movable Type	Version 4.12
Sixapart Movable Type	Version 4.12
Sixapart Movable Type	Version 4.1
Sixapart Movable Type	Version 4.1
Sixapart Movable Type	Version 4.21
Sixapart Movable Type	Version 4.21
Sixapart Movable Type	Version 4.21
Sixapart Movable Type	Version 4.23
Sixapart Movable Type	Version 4.23
Sixapart Movable Type	Version 4.23
Sixapart Movable Type	Version 4.25
Sixapart Movable Type	Version 4.2
Sixapart Movable Type	Version 4.2
Sixapart Movable Type	Version 4.2