CVE-2012-1262

Published: Mar 3, 2012Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in cgi-bin/mt/mt-wizard.cgi in Movable Type before 4.38, 5.0x before 5.07, and 5.1x before 5.13, when the product is incompletely installed, allows remote attackers to inject arbitrary web script or HTML via the dbuser parameter, a different vulnerability than CVE-2012-0318.

Affected (120)

Products: Movabletype: Movable Type Open Source, Movable Type Enterprise, Movable Type Advanced, Movable Type Pro

Movabletype

4 products

Movable Type Open Source

Movable Type Enterprise

Movable Type Advanced

Movable Type Pro

Configuration A

30 vulnerable

Vulnerable Software	Affected Versions
Movabletype Movable Type Open Source	Up to 4.37
Movabletype Movable Type Open Source	Version 4.01 beta
Movabletype Movable Type Open Source	Version 4.0
Movabletype Movable Type Open Source	Version 4.0 beta
Movabletype Movable Type Open Source	Version 4.1
Movabletype Movable Type Open Source	Version 4.1 beta
Movabletype Movable Type Open Source	Version 4.23
Movabletype Movable Type Open Source	Version 4.25
Movabletype Movable Type Open Source	Version 4.261
Movabletype Movable Type Open Source	Version 4.26
Movabletype Movable Type Open Source	Version 4.2
Movabletype Movable Type Open Source	Version 4.2 beta
Movabletype Movable Type Open Source	Version 4.31
Movabletype Movable Type Open Source	Version 4.32
Movabletype Movable Type Open Source	Version 4.33
Movabletype Movable Type Open Source	Version 4.34
Movabletype Movable Type Open Source	Version 4.35
Movabletype Movable Type Open Source	Version 4.361
Movabletype Movable Type Open Source	Version 4.36
Movabletype Movable Type Open Source	Version 4.3
Movabletype Movable Type Open Source	Version 5.02
Movabletype Movable Type Open Source	Version 5.031
Movabletype Movable Type Open Source	Version 5.03
Movabletype Movable Type Open Source	Version 5.04
Movabletype Movable Type Open Source	Version 5.051
Movabletype Movable Type Open Source	Version 5.05
Movabletype Movable Type Open Source	Version 5.06
Movabletype Movable Type Open Source	Version 5.11
Movabletype Movable Type Open Source	Version 5.12
Movabletype Movable Type Open Source	Version 5.1

Configuration B

30 vulnerable

Vulnerable Software	Affected Versions
Movabletype Movable Type Enterprise	Up to 4.37
Movabletype Movable Type Enterprise	Version 4.01 beta
Movabletype Movable Type Enterprise	Version 4.0
Movabletype Movable Type Enterprise	Version 4.0 beta
Movabletype Movable Type Enterprise	Version 4.1
Movabletype Movable Type Enterprise	Version 4.1 beta
Movabletype Movable Type Enterprise	Version 4.23
Movabletype Movable Type Enterprise	Version 4.25
Movabletype Movable Type Enterprise	Version 4.261
Movabletype Movable Type Enterprise	Version 4.26
Movabletype Movable Type Enterprise	Version 4.2
Movabletype Movable Type Enterprise	Version 4.2 beta
Movabletype Movable Type Enterprise	Version 4.31
Movabletype Movable Type Enterprise	Version 4.32
Movabletype Movable Type Enterprise	Version 4.33
Movabletype Movable Type Enterprise	Version 4.34
Movabletype Movable Type Enterprise	Version 4.35
Movabletype Movable Type Enterprise	Version 4.361
Movabletype Movable Type Enterprise	Version 4.36
Movabletype Movable Type Enterprise	Version 4.3
Movabletype Movable Type Enterprise	Version 5.02
Movabletype Movable Type Enterprise	Version 5.031
Movabletype Movable Type Enterprise	Version 5.03
Movabletype Movable Type Enterprise	Version 5.04
Movabletype Movable Type Enterprise	Version 5.051
Movabletype Movable Type Enterprise	Version 5.05
Movabletype Movable Type Enterprise	Version 5.06
Movabletype Movable Type Enterprise	Version 5.11
Movabletype Movable Type Enterprise	Version 5.12
Movabletype Movable Type Enterprise	Version 5.1

Configuration C

30 vulnerable

Vulnerable Software	Affected Versions
Movabletype Movable Type Advanced	Up to 4.37
Movabletype Movable Type Advanced	Version 4.01 beta
Movabletype Movable Type Advanced	Version 4.0
Movabletype Movable Type Advanced	Version 4.0 beta
Movabletype Movable Type Advanced	Version 4.1
Movabletype Movable Type Advanced	Version 4.1 beta
Movabletype Movable Type Advanced	Version 4.23
Movabletype Movable Type Advanced	Version 4.25
Movabletype Movable Type Advanced	Version 4.261
Movabletype Movable Type Advanced	Version 4.26
Movabletype Movable Type Advanced	Version 4.2
Movabletype Movable Type Advanced	Version 4.2 beta
Movabletype Movable Type Advanced	Version 4.31
Movabletype Movable Type Advanced	Version 4.32
Movabletype Movable Type Advanced	Version 4.33
Movabletype Movable Type Advanced	Version 4.34
Movabletype Movable Type Advanced	Version 4.35
Movabletype Movable Type Advanced	Version 4.361
Movabletype Movable Type Advanced	Version 4.36
Movabletype Movable Type Advanced	Version 4.3
Movabletype Movable Type Advanced	Version 5.02
Movabletype Movable Type Advanced	Version 5.031
Movabletype Movable Type Advanced	Version 5.03
Movabletype Movable Type Advanced	Version 5.04
Movabletype Movable Type Advanced	Version 5.051
Movabletype Movable Type Advanced	Version 5.05
Movabletype Movable Type Advanced	Version 5.06
Movabletype Movable Type Advanced	Version 5.11
Movabletype Movable Type Advanced	Version 5.12
Movabletype Movable Type Advanced	Version 5.1

Configuration D

30 vulnerable

Vulnerable Software	Affected Versions
Movabletype Movable Type Pro	Up to 4.37
Movabletype Movable Type Pro	Version 4.01 beta
Movabletype Movable Type Pro	Version 4.0
Movabletype Movable Type Pro	Version 4.0 beta
Movabletype Movable Type Pro	Version 4.1
Movabletype Movable Type Pro	Version 4.1 beta
Movabletype Movable Type Pro	Version 4.23
Movabletype Movable Type Pro	Version 4.25
Movabletype Movable Type Pro	Version 4.261
Movabletype Movable Type Pro	Version 4.26
Movabletype Movable Type Pro	Version 4.2
Movabletype Movable Type Pro	Version 4.2 beta
Movabletype Movable Type Pro	Version 4.31
Movabletype Movable Type Pro	Version 4.32
Movabletype Movable Type Pro	Version 4.33
Movabletype Movable Type Pro	Version 4.34
Movabletype Movable Type Pro	Version 4.35
Movabletype Movable Type Pro	Version 4.361
Movabletype Movable Type Pro	Version 4.36
Movabletype Movable Type Pro	Version 4.3
Movabletype Movable Type Pro	Version 5.02
Movabletype Movable Type Pro	Version 5.031
Movabletype Movable Type Pro	Version 5.03
Movabletype Movable Type Pro	Version 5.04
Movabletype Movable Type Pro	Version 5.051
Movabletype Movable Type Pro	Version 5.05
Movabletype Movable Type Pro	Version 5.06
Movabletype Movable Type Pro	Version 5.11
Movabletype Movable Type Pro	Version 5.12
Movabletype Movable Type Pro	Version 5.1