ByteOS Network

Vulnerability Details :

CVE-2012-1262

Assigner-mitre

Assigner Org ID-8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At-03 Mar, 2012 | 02:00

Updated At-06 Aug, 2024 | 18:53

Cross-site scripting (XSS) vulnerability in cgi-bin/mt/mt-wizard.cgi in Movable Type before 4.38, 5.0x before 5.07, and 5.1x before 5.13, when the product is incompletely installed, allows remote attackers to inject arbitrary web script or HTML via the dbuser parameter, a different vulnerability than CVE-2012-0318.

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:mitre

Assigner Org ID:8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At:03 Mar, 2012 | 02:00

Updated At:06 Aug, 2024 | 18:53

▼CVE Numbering Authority (CNA)

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
http://packetstormsecurity.org/files/110203/Movable-Type-Publishing-Platform-Cross-Site-Scripting.html	x_refsource_MISC
http://seclists.org/fulldisclosure/2012/Feb/407	mailing-list x_refsource_FULLDISC
http://www.movabletype.org/2012/02/movable_type_513_507_and_438_security_updates.html	x_refsource_CONFIRM
http://www.securityfocus.com/bid/52138	vdb-entry x_refsource_BID
http://www.debian.org/security/2012/dsa-2423	vendor-advisory x_refsource_DEBIAN
http://www.securitytracker.com/id?1026738	vdb-entry x_refsource_SECTRACK
https://www.trustwave.com/spiderlabs/advisories/TWSL2012-003.txt	x_refsource_MISC
http://www.movabletype.org/documentation/appendices/release-notes/513.html	x_refsource_CONFIRM
http://jvndb.jvn.jp/jvndb/JVNDB-2012-000016	third-party-advisory x_refsource_JVNDB
https://exchange.xforce.ibmcloud.com/vulnerabilities/73480	vdb-entry x_refsource_XF
https://exchange.xforce.ibmcloud.com/vulnerabilities/73411	vdb-entry x_refsource_XF
http://jvn.jp/en/jp/JVN49836527/index.html	third-party-advisory x_refsource_JVN
http://osvdb.org/79470	vdb-entry x_refsource_OSVDB

Hyperlink: http://packetstormsecurity.org/files/110203/Movable-Type-Publishing-Platform-Cross-Site-Scripting.html

Resource:

x_refsource_MISC

Hyperlink: http://seclists.org/fulldisclosure/2012/Feb/407

Resource:

mailing-list

x_refsource_FULLDISC

Hyperlink: http://www.movabletype.org/2012/02/movable_type_513_507_and_438_security_updates.html

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.securityfocus.com/bid/52138

Resource:

vdb-entry

x_refsource_BID

Hyperlink: http://www.debian.org/security/2012/dsa-2423

Resource:

vendor-advisory

x_refsource_DEBIAN

Hyperlink: http://www.securitytracker.com/id?1026738

Resource:

vdb-entry

x_refsource_SECTRACK

Hyperlink: https://www.trustwave.com/spiderlabs/advisories/TWSL2012-003.txt

Resource:

x_refsource_MISC

Hyperlink: http://www.movabletype.org/documentation/appendices/release-notes/513.html

Resource:

x_refsource_CONFIRM

Hyperlink: http://jvndb.jvn.jp/jvndb/JVNDB-2012-000016

Resource:

third-party-advisory

x_refsource_JVNDB

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/73480

Resource:

vdb-entry

x_refsource_XF

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/73411

Resource:

vdb-entry

x_refsource_XF

Hyperlink: http://jvn.jp/en/jp/JVN49836527/index.html

Resource:

third-party-advisory

x_refsource_JVN

Hyperlink: http://osvdb.org/79470

Resource:

vdb-entry

x_refsource_OSVDB

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://packetstormsecurity.org/files/110203/Movable-Type-Publishing-Platform-Cross-Site-Scripting.html	x_refsource_MISC x_transferred
http://seclists.org/fulldisclosure/2012/Feb/407	mailing-list x_refsource_FULLDISC x_transferred
http://www.movabletype.org/2012/02/movable_type_513_507_and_438_security_updates.html	x_refsource_CONFIRM x_transferred
http://www.securityfocus.com/bid/52138	vdb-entry x_refsource_BID x_transferred
http://www.debian.org/security/2012/dsa-2423	vendor-advisory x_refsource_DEBIAN x_transferred
http://www.securitytracker.com/id?1026738	vdb-entry x_refsource_SECTRACK x_transferred
https://www.trustwave.com/spiderlabs/advisories/TWSL2012-003.txt	x_refsource_MISC x_transferred
http://www.movabletype.org/documentation/appendices/release-notes/513.html	x_refsource_CONFIRM x_transferred
http://jvndb.jvn.jp/jvndb/JVNDB-2012-000016	third-party-advisory x_refsource_JVNDB x_transferred
https://exchange.xforce.ibmcloud.com/vulnerabilities/73480	vdb-entry x_refsource_XF x_transferred
https://exchange.xforce.ibmcloud.com/vulnerabilities/73411	vdb-entry x_refsource_XF x_transferred
http://jvn.jp/en/jp/JVN49836527/index.html	third-party-advisory x_refsource_JVN x_transferred
http://osvdb.org/79470	vdb-entry x_refsource_OSVDB x_transferred

Hyperlink: http://packetstormsecurity.org/files/110203/Movable-Type-Publishing-Platform-Cross-Site-Scripting.html

Resource:

x_refsource_MISC

x_transferred

Hyperlink: http://seclists.org/fulldisclosure/2012/Feb/407

Resource:

mailing-list

x_refsource_FULLDISC

x_transferred

Hyperlink: http://www.movabletype.org/2012/02/movable_type_513_507_and_438_security_updates.html

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://www.securityfocus.com/bid/52138

Resource:

vdb-entry

x_refsource_BID

x_transferred

Hyperlink: http://www.debian.org/security/2012/dsa-2423

Resource:

vendor-advisory

x_refsource_DEBIAN

x_transferred

Hyperlink: http://www.securitytracker.com/id?1026738

Resource:

vdb-entry

x_refsource_SECTRACK

x_transferred

Hyperlink: https://www.trustwave.com/spiderlabs/advisories/TWSL2012-003.txt

Resource:

x_refsource_MISC

x_transferred

Hyperlink: http://www.movabletype.org/documentation/appendices/release-notes/513.html

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://jvndb.jvn.jp/jvndb/JVNDB-2012-000016

Resource:

third-party-advisory

x_refsource_JVNDB

x_transferred

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/73480

Resource:

vdb-entry

x_refsource_XF

x_transferred

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/73411

Resource:

vdb-entry

x_refsource_XF

x_transferred

Hyperlink: http://jvn.jp/en/jp/JVN49836527/index.html

Resource:

third-party-advisory

x_refsource_JVN

x_transferred

Hyperlink: http://osvdb.org/79470

Resource:

vdb-entry

x_refsource_OSVDB

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:cve@mitre.org

Published At:03 Mar, 2012 | 04:04

Updated At:11 Apr, 2025 | 00:51

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	4.3	MEDIUM	AV:N/AC:M/Au:N/C:N/I:P/A:N

Type: Primary

Version: 2.0

Base score: 4.3

Base severity: MEDIUM

Vector:

AV:N/AC:M/Au:N/C:N/I:P/A:N

CPE Matches

movabletype>>movable_type_open_source>>Versions up to 4.37(inclusive)

cpe:2.3:a:movabletype:movable_type_open_source:*:*:*:*:*:*:*:*

movabletype>>movable_type_open_source>>4.0

cpe:2.3:a:movabletype:movable_type_open_source:4.0:*:*:*:*:*:*:*

movabletype>>movable_type_open_source>>4.0

cpe:2.3:a:movabletype:movable_type_open_source:4.0:beta:*:*:*:*:*:*

movabletype>>movable_type_open_source>>4.1

cpe:2.3:a:movabletype:movable_type_open_source:4.1:*:*:*:*:*:*:*

movabletype>>movable_type_open_source>>4.1

cpe:2.3:a:movabletype:movable_type_open_source:4.1:beta:*:*:*:*:*:*

movabletype>>movable_type_open_source>>4.01

cpe:2.3:a:movabletype:movable_type_open_source:4.01:beta:*:*:*:*:*:*

movabletype>>movable_type_open_source>>4.2

cpe:2.3:a:movabletype:movable_type_open_source:4.2:*:*:*:*:*:*:*

movabletype>>movable_type_open_source>>4.2

cpe:2.3:a:movabletype:movable_type_open_source:4.2:beta:*:*:*:*:*:*

movabletype>>movable_type_open_source>>4.3

cpe:2.3:a:movabletype:movable_type_open_source:4.3:*:*:*:*:*:*:*

movabletype>>movable_type_open_source>>4.23

cpe:2.3:a:movabletype:movable_type_open_source:4.23:*:*:*:*:*:*:*

movabletype>>movable_type_open_source>>4.25

cpe:2.3:a:movabletype:movable_type_open_source:4.25:*:*:*:*:*:*:*

movabletype>>movable_type_open_source>>4.26

cpe:2.3:a:movabletype:movable_type_open_source:4.26:*:*:*:*:*:*:*

movabletype>>movable_type_open_source>>4.31

cpe:2.3:a:movabletype:movable_type_open_source:4.31:*:*:*:*:*:*:*

movabletype>>movable_type_open_source>>4.32

cpe:2.3:a:movabletype:movable_type_open_source:4.32:*:*:*:*:*:*:*

movabletype>>movable_type_open_source>>4.33

cpe:2.3:a:movabletype:movable_type_open_source:4.33:*:*:*:*:*:*:*

movabletype>>movable_type_open_source>>4.34

cpe:2.3:a:movabletype:movable_type_open_source:4.34:*:*:*:*:*:*:*

movabletype>>movable_type_open_source>>4.35

cpe:2.3:a:movabletype:movable_type_open_source:4.35:*:*:*:*:*:*:*

movabletype>>movable_type_open_source>>4.36

cpe:2.3:a:movabletype:movable_type_open_source:4.36:*:*:*:*:*:*:*

movabletype>>movable_type_open_source>>4.261

cpe:2.3:a:movabletype:movable_type_open_source:4.261:*:*:*:*:*:*:*

movabletype>>movable_type_open_source>>4.361

cpe:2.3:a:movabletype:movable_type_open_source:4.361:*:*:*:*:*:*:*

movabletype>>movable_type_open_source>>5.1

cpe:2.3:a:movabletype:movable_type_open_source:5.1:*:*:*:*:*:*:*

movabletype>>movable_type_open_source>>5.02

cpe:2.3:a:movabletype:movable_type_open_source:5.02:*:*:*:*:*:*:*

movabletype>>movable_type_open_source>>5.03

cpe:2.3:a:movabletype:movable_type_open_source:5.03:*:*:*:*:*:*:*

movabletype>>movable_type_open_source>>5.04

cpe:2.3:a:movabletype:movable_type_open_source:5.04:*:*:*:*:*:*:*

movabletype>>movable_type_open_source>>5.05

cpe:2.3:a:movabletype:movable_type_open_source:5.05:*:*:*:*:*:*:*

movabletype>>movable_type_open_source>>5.06

cpe:2.3:a:movabletype:movable_type_open_source:5.06:*:*:*:*:*:*:*

movabletype>>movable_type_open_source>>5.11

cpe:2.3:a:movabletype:movable_type_open_source:5.11:*:*:*:*:*:*:*

movabletype>>movable_type_open_source>>5.12

cpe:2.3:a:movabletype:movable_type_open_source:5.12:*:*:*:*:*:*:*

movabletype>>movable_type_open_source>>5.031

cpe:2.3:a:movabletype:movable_type_open_source:5.031:*:*:*:*:*:*:*

movabletype>>movable_type_open_source>>5.051

cpe:2.3:a:movabletype:movable_type_open_source:5.051:*:*:*:*:*:*:*

movabletype>>movable_type_enterprise>>Versions up to 4.37(inclusive)

cpe:2.3:a:movabletype:movable_type_enterprise:*:*:*:*:*:*:*:*

movabletype>>movable_type_enterprise>>4.0

cpe:2.3:a:movabletype:movable_type_enterprise:4.0:*:*:*:*:*:*:*

movabletype>>movable_type_enterprise>>4.0

cpe:2.3:a:movabletype:movable_type_enterprise:4.0:beta:*:*:*:*:*:*

movabletype>>movable_type_enterprise>>4.1

cpe:2.3:a:movabletype:movable_type_enterprise:4.1:*:*:*:*:*:*:*

movabletype>>movable_type_enterprise>>4.01

cpe:2.3:a:movabletype:movable_type_enterprise:4.01:beta:*:*:*:*:*:*

movabletype>>movable_type_enterprise>>4.1

cpe:2.3:a:movabletype:movable_type_enterprise:4.1:beta:*:*:*:*:*:*

movabletype>>movable_type_enterprise>>4.2

cpe:2.3:a:movabletype:movable_type_enterprise:4.2:*:*:*:*:*:*:*

movabletype>>movable_type_enterprise>>4.2

cpe:2.3:a:movabletype:movable_type_enterprise:4.2:beta:*:*:*:*:*:*

movabletype>>movable_type_enterprise>>4.3

cpe:2.3:a:movabletype:movable_type_enterprise:4.3:*:*:*:*:*:*:*

movabletype>>movable_type_enterprise>>4.23

cpe:2.3:a:movabletype:movable_type_enterprise:4.23:*:*:*:*:*:*:*

movabletype>>movable_type_enterprise>>4.25

cpe:2.3:a:movabletype:movable_type_enterprise:4.25:*:*:*:*:*:*:*

movabletype>>movable_type_enterprise>>4.26

cpe:2.3:a:movabletype:movable_type_enterprise:4.26:*:*:*:*:*:*:*

movabletype>>movable_type_enterprise>>4.31

cpe:2.3:a:movabletype:movable_type_enterprise:4.31:*:*:*:*:*:*:*

movabletype>>movable_type_enterprise>>4.32

cpe:2.3:a:movabletype:movable_type_enterprise:4.32:*:*:*:*:*:*:*

movabletype>>movable_type_enterprise>>4.33

cpe:2.3:a:movabletype:movable_type_enterprise:4.33:*:*:*:*:*:*:*

movabletype>>movable_type_enterprise>>4.34

cpe:2.3:a:movabletype:movable_type_enterprise:4.34:*:*:*:*:*:*:*

movabletype>>movable_type_enterprise>>4.35

cpe:2.3:a:movabletype:movable_type_enterprise:4.35:*:*:*:*:*:*:*

movabletype>>movable_type_enterprise>>4.36

cpe:2.3:a:movabletype:movable_type_enterprise:4.36:*:*:*:*:*:*:*

movabletype>>movable_type_enterprise>>4.261

cpe:2.3:a:movabletype:movable_type_enterprise:4.261:*:*:*:*:*:*:*

movabletype>>movable_type_enterprise>>4.361

cpe:2.3:a:movabletype:movable_type_enterprise:4.361:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-79	Primary	nvd@nist.gov

CWE ID: CWE-79

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://jvn.jp/en/jp/JVN49836527/index.html	cve@mitre.org	N/A
http://jvndb.jvn.jp/jvndb/JVNDB-2012-000016	cve@mitre.org	N/A
http://osvdb.org/79470	cve@mitre.org	N/A
http://packetstormsecurity.org/files/110203/Movable-Type-Publishing-Platform-Cross-Site-Scripting.html	cve@mitre.org	N/A
http://seclists.org/fulldisclosure/2012/Feb/407	cve@mitre.org	N/A
http://www.debian.org/security/2012/dsa-2423	cve@mitre.org	N/A
http://www.movabletype.org/2012/02/movable_type_513_507_and_438_security_updates.html	cve@mitre.org	Patch Vendor Advisory
http://www.movabletype.org/documentation/appendices/release-notes/513.html	cve@mitre.org	Patch Vendor Advisory
http://www.securityfocus.com/bid/52138	cve@mitre.org	N/A
http://www.securitytracker.com/id?1026738	cve@mitre.org	N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/73411	cve@mitre.org	N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/73480	cve@mitre.org	N/A
https://www.trustwave.com/spiderlabs/advisories/TWSL2012-003.txt	cve@mitre.org	Exploit
http://jvn.jp/en/jp/JVN49836527/index.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://jvndb.jvn.jp/jvndb/JVNDB-2012-000016	af854a3a-2127-422b-91ae-364da2661108	N/A
http://osvdb.org/79470	af854a3a-2127-422b-91ae-364da2661108	N/A
http://packetstormsecurity.org/files/110203/Movable-Type-Publishing-Platform-Cross-Site-Scripting.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://seclists.org/fulldisclosure/2012/Feb/407	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.debian.org/security/2012/dsa-2423	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.movabletype.org/2012/02/movable_type_513_507_and_438_security_updates.html	af854a3a-2127-422b-91ae-364da2661108	Patch Vendor Advisory
http://www.movabletype.org/documentation/appendices/release-notes/513.html	af854a3a-2127-422b-91ae-364da2661108	Patch Vendor Advisory
http://www.securityfocus.com/bid/52138	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securitytracker.com/id?1026738	af854a3a-2127-422b-91ae-364da2661108	N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/73411	af854a3a-2127-422b-91ae-364da2661108	N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/73480	af854a3a-2127-422b-91ae-364da2661108	N/A
https://www.trustwave.com/spiderlabs/advisories/TWSL2012-003.txt	af854a3a-2127-422b-91ae-364da2661108	Exploit