CVE-2012-0317
03.03.2012, 04:04
Multiple cross-site request forgery (CSRF) vulnerabilities in Movable Type before 4.38, 5.0x before 5.07, and 5.1x before 5.13 allow remote attackers to hijack the authentication of arbitrary users for requests that modify data via the (1) commenting feature or (2) community script.
CSRF
| Vendor | Product | Version |
|---|---|---|
| sixapart | movable_type | 𝑥 ≤ 4.37 |
| sixapart | movable_type | 4.28 |
| sixapart | movable_type | 4.29 |
| sixapart | movable_type | 4.36 |
| sixapart | movable_type | 4.291 |
| sixapart | movable_type | 4.292 |
| sixapart | movable_type | 4.361 |
| sixapart | movable_type | 5.0 |
| sixapart | movable_type | 5.01 |
| sixapart | movable_type | 5.1 |
| sixapart | movable_type | 5.02 |
| sixapart | movable_type | 5.04 |
| sixapart | movable_type | 5.05 |
| sixapart | movable_type | 5.06 |
| sixapart | movable_type | 5.11 |
| sixapart | movable_type | 5.12 |
| sixapart | movable_type | 5.051 |
| sixapart | movable_type | 𝑥 ≤ 4.292 |
| sixapart | movable_type | 4.28 |
| sixapart | movable_type | 4.29 |
| sixapart | movable_type | 4.291 |
| sixapart | movable_type | 5.1 |
| sixapart | movable_type | 5.02 |
| sixapart | movable_type | 5.04 |
| sixapart | movable_type | 5.05 |
| sixapart | movable_type | 5.06 |
| sixapart | movable_type | 5.11 |
| sixapart | movable_type | 5.12 |
| sixapart | movable_type | 5.051 |
| sixapart | movable_type | 4.0 |
| sixapart | movable_type | 4.0 |
| sixapart | movable_type | 4.0 |
| sixapart | movable_type | 4.0 |
| sixapart | movable_type | 4.0 |
| sixapart | movable_type | 4.0 |
| sixapart | movable_type | 4.0 |
| sixapart | movable_type | 4.0 |
| sixapart | movable_type | 4.0 |
| sixapart | movable_type | 4.0 |
| sixapart | movable_type | 4.0 |
| sixapart | movable_type | 4.1 |
| sixapart | movable_type | 4.1 |
| sixapart | movable_type | 4.1 |
| sixapart | movable_type | 4.2 |
| sixapart | movable_type | 4.2 |
| sixapart | movable_type | 4.2 |
| sixapart | movable_type | 4.2 |
| sixapart | movable_type | 4.12 |
| sixapart | movable_type | 4.15 |
| sixapart | movable_type | 4.15 |
| sixapart | movable_type | 4.15 |
| sixapart | movable_type | 4.22 |
| sixapart | movable_type | 4.23 |
| sixapart | movable_type | 4.24 |
| sixapart | movable_type | 4.25 |
| sixapart | movable_type | 4.26 |
| sixapart | movable_type | 4.27 |
| sixapart | movable_type | 4.28 |
| sixapart | movable_type | 4.29 |
| sixapart | movable_type | 4.35 |
| sixapart | movable_type | 4.36 |
| sixapart | movable_type | 4.37 |
| sixapart | movable_type | 4.261 |
| sixapart | movable_type | 4.291 |
| sixapart | movable_type | 4.292 |
| sixapart | movable_type | 4.361 |
| sixapart | movable_type | 5.0 |
| sixapart | movable_type | 5.0 |
| sixapart | movable_type | 5.0 |
| sixapart | movable_type | 5.0 |
| sixapart | movable_type | 5.0 |
| sixapart | movable_type | 5.0 |
| sixapart | movable_type | 5.0 |
| sixapart | movable_type | 5.0 |
| sixapart | movable_type | 5.01 |
| sixapart | movable_type | 5.1 |
| sixapart | movable_type | 5.1 |
| sixapart | movable_type | 5.02 |
| sixapart | movable_type | 5.03 |
| sixapart | movable_type | 5.04 |
| sixapart | movable_type | 5.05 |
| sixapart | movable_type | 5.06 |
| sixapart | movable_type | 5.07 |
| sixapart | movable_type | 5.11 |
| sixapart | movable_type | 5.12 |
| sixapart | movable_type | 5.031 |
| sixapart | movable_type | 5.051 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Common Weakness Enumeration
References