CVE-2008-5846
Published: 5 January 2009
Six Apart Movable Type (MT) before 4.23 allows remote authenticated users with create permission for posts to bypass intended access restrictions and publish posts via a "system-wide entry listing screen."
Priority
Status
| Package | Release | Status |
|---|---|---|
|
movabletype-opensource Launchpad, Ubuntu, Debian |
dapper |
Does not exist
|
| gutsy |
Does not exist
|
|
| hardy |
Does not exist
|
|
| intrepid |
Ignored
(end of life, was needed)
|
|
| jaunty |
Not vulnerable
(4.2.3-1)
|
|
| karmic |
Not vulnerable
(4.2.3-1)
|
|
| upstream |
Released
(4.2.3)
|