CVE-2012-0317

Published: Mar 3, 2012Modified: Apr 29, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in Movable Type before 4.38, 5.0x before 5.07, and 5.1x before 5.13 allow remote attackers to hijack the authentication of arbitrary users for requests that modify data via the (1) commenting feature or (2) community script.

Affected (87)

Products: Sixapart: Movable Type

Sixapart

1 product

Movable Type

Configuration A

17 vulnerable

Vulnerable Software	Affected Versions
Sixapart Movable Type	Up to 4.37
Sixapart Movable Type	Version 4.28
Sixapart Movable Type	Version 4.291
Sixapart Movable Type	Version 4.292
Sixapart Movable Type	Version 4.29
Sixapart Movable Type	Version 4.361
Sixapart Movable Type	Version 4.36
Sixapart Movable Type	Version 5.01
Sixapart Movable Type	Version 5.02
Sixapart Movable Type	Version 5.04
Sixapart Movable Type	Version 5.051
Sixapart Movable Type	Version 5.05
Sixapart Movable Type	Version 5.06
Sixapart Movable Type	Version 5.0
Sixapart Movable Type	Version 5.11
Sixapart Movable Type	Version 5.12
Sixapart Movable Type	Version 5.1

Configuration B

4 vulnerable

Vulnerable Software	Affected Versions
Sixapart Movable Type	Up to 4.292
Sixapart Movable Type	Version 4.28
Sixapart Movable Type	Version 4.291
Sixapart Movable Type	Version 4.29

Configuration C

8 vulnerable

Vulnerable Software	Affected Versions
Sixapart Movable Type	Version 5.02
Sixapart Movable Type	Version 5.04
Sixapart Movable Type	Version 5.051
Sixapart Movable Type	Version 5.05
Sixapart Movable Type	Version 5.06
Sixapart Movable Type	Version 5.11
Sixapart Movable Type	Version 5.12
Sixapart Movable Type	Version 5.1

Configuration D

58 vulnerable

Vulnerable Software	Affected Versions
Sixapart Movable Type	Version 4.0
Sixapart Movable Type	Version 4.0 beta2
Sixapart Movable Type	Version 4.0 beta3
Sixapart Movable Type	Version 4.0 beta4
Sixapart Movable Type	Version 4.0 beta5
Sixapart Movable Type	Version 4.0 beta6
Sixapart Movable Type	Version 4.0 beta7
Sixapart Movable Type	Version 4.0 beta
Sixapart Movable Type	Version 4.0 rc1
Sixapart Movable Type	Version 4.0 rc2
Sixapart Movable Type	Version 4.0 rc3
Sixapart Movable Type	Version 4.12
Sixapart Movable Type	Version 4.15 beta1
Sixapart Movable Type	Version 4.15 beta3
Sixapart Movable Type	Version 4.15 beta4
Sixapart Movable Type	Version 4.1 beta2
Sixapart Movable Type	Version 4.1 beta
Sixapart Movable Type	Version 4.1 rc1
Sixapart Movable Type	Version 4.22
Sixapart Movable Type	Version 4.23
Sixapart Movable Type	Version 4.24
Sixapart Movable Type	Version 4.25
Sixapart Movable Type	Version 4.261
Sixapart Movable Type	Version 4.26
Sixapart Movable Type	Version 4.27
Sixapart Movable Type	Version 4.28
Sixapart Movable Type	Version 4.291
Sixapart Movable Type	Version 4.292
Sixapart Movable Type	Version 4.29
Sixapart Movable Type	Version 4.2
Sixapart Movable Type	Version 4.2 rc2
Sixapart Movable Type	Version 4.2 rc4
Sixapart Movable Type	Version 4.2 rc5
Sixapart Movable Type	Version 4.35
Sixapart Movable Type	Version 4.361
Sixapart Movable Type	Version 4.36
Sixapart Movable Type	Version 4.37
Sixapart Movable Type	Version 5.01
Sixapart Movable Type	Version 5.02
Sixapart Movable Type	Version 5.031
Sixapart Movable Type	Version 5.03
Sixapart Movable Type	Version 5.04
Sixapart Movable Type	Version 5.051
Sixapart Movable Type	Version 5.05
Sixapart Movable Type	Version 5.06
Sixapart Movable Type	Version 5.07
Sixapart Movable Type	Version 5.0
Sixapart Movable Type	Version 5.0 beta1
Sixapart Movable Type	Version 5.0 beta2
Sixapart Movable Type	Version 5.0 beta3
Sixapart Movable Type	Version 5.0 beta4
Sixapart Movable Type	Version 5.0 rc1
Sixapart Movable Type	Version 5.0 rc2
Sixapart Movable Type	Version 5.0 rc3
Sixapart Movable Type	Version 5.11
Sixapart Movable Type	Version 5.12
Sixapart Movable Type	Version 5.1 beta
Sixapart Movable Type	Version 5.1 rc1