Beveiligingsadvies

CVE-2012-1262

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2012-03-03 02:00:00
Laatst bijgewerkt 2024-08-06 18:53:36
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

Cross-site scripting (XSS) vulnerability in cgi-bin/mt/mt-wizard.cgi in Movable Type before 4.38, 5.0x before 5.07, and 5.1x before 5.13, when the product is incompletely installed, allows remote attackers to inject arbitrary web script or HTML via the dbuser parameter, a different vulnerability than CVE-2012-0318.