CVE-2009-2492

Published: Jul 17, 2009Modified: Apr 23, 2026

2.6

Vector

AV:N/AC:H/Au:N/C:N/I:P/A:N

Exploitability: 4.9 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in mt-wizard.cgi in Six Apart Movable Type before 4.261 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2009-2480.

Affected (60)

Products: Six Apart: Movable Type · Six Apart Ltd: Movable Type · Sixapart: Movable Type

1 product

1 product

1 product

Configuration A

60 vulnerable

Vulnerable Software	Affected Versions
Six Apart Movable Type	Up to 4.25
Six Apart Movable Type	Version 1.54
Six Apart Movable Type	Version 2.63
Six Apart Movable Type	Version 2.6
Six Apart Movable Type	Version 3.16
Six Apart Movable Type	Version 3.17
Six Apart Movable Type	Version 3.32
Six Apart Movable Type	Version 3.33
Six Apart Movable Type	Version 3.36
Six Apart Movable Type	Version 3.3
Six Apart Movable Type	Version 4.20
Six Apart Movable Type	Version 4.20
Six Apart Movable Type	Version 4.20
Six Apart Movable Type	Version 4.20
Six Apart Movable Type	Version 4
Six Apart Movable Type	Version 4
Six Apart Movable Type	Version 4
Six Apart Movable Type	Version 4
Six Apart Ltd Movable Type	All versions
Six Apart Ltd Movable Type	Version 3.33
Sixapart Movable Type	Version 1.00
Sixapart Movable Type	Version 1.1
Sixapart Movable Type	Version 1.2
Sixapart Movable Type	Version 1.31
Sixapart Movable Type	Version 1.3
Sixapart Movable Type	Version 1.4
Sixapart Movable Type	Version 1.5
Sixapart Movable Type	Version 3.01d
Sixapart Movable Type	Version 3.0d
Sixapart Movable Type	Version 3.11
Sixapart Movable Type	Version 3.12
Sixapart Movable Type	Version 3.14
Sixapart Movable Type	Version 3.15
Sixapart Movable Type	Version 3.16
Sixapart Movable Type	Version 3.17
Sixapart Movable Type	Version 3.1
Sixapart Movable Type	Version 3.2
Sixapart Movable Type	Version 3.32
Sixapart Movable Type	Version 3.33
Sixapart Movable Type	Version 3.34
Sixapart Movable Type	Version 3.35
Sixapart Movable Type	Version 3.3
Sixapart Movable Type	Version 4.01
Sixapart Movable Type	Version 4.01
Sixapart Movable Type	Version 4.01 b
Sixapart Movable Type	Version 4.01 b
Sixapart Movable Type	Version 4.0
Sixapart Movable Type	Version 4.0
Sixapart Movable Type	Version 4.12
Sixapart Movable Type	Version 4.12
Sixapart Movable Type	Version 4.1
Sixapart Movable Type	Version 4.1
Sixapart Movable Type	Version 4.21
Sixapart Movable Type	Version 4.21
Sixapart Movable Type	Version 4.21
Sixapart Movable Type	Version 4.23
Sixapart Movable Type	Version 4.23
Sixapart Movable Type	Version 4.2
Sixapart Movable Type	Version 4.2
Sixapart Movable Type	Version 4.2