CVE-2010-3922

SQL injection vulnerability in Movable Type 4.x before 4.35 and 5.x before 5.04 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
SQL Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
jpcertCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 71%
VendorProductVersion
sixapartmovabletype
4.0
sixapartmovabletype
4.1
sixapartmovabletype
4.2
sixapartmovabletype
4.3
sixapartmovabletype
4.23
sixapartmovabletype
4.25
sixapartmovabletype
4.26
sixapartmovabletype
4.31
sixapartmovabletype
4.32
sixapartmovabletype
4.33
sixapartmovabletype
4.34
sixapartmovabletype
4.261
sixapartmovabletype
5.0:rc2
sixapartmovabletype
5.01
sixapartmovabletype
5.02
sixapartmovabletype
5.03
sixapartmovabletype
5.031
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
movabletype-opensource
saucy
not-affected
raring
not-affected
quantal
not-affected
precise
not-affected
oneiric
not-affected
natty
not-affected
maverick
ignored
lucid
ignored
karmic
ignored
hardy
dne
dapper
dne