CVE-2003-0287 | BDVDB-2026-5447 Detail

Description#

Cross-site scripting (XSS) vulnerability in Movable Type before 2.6, and possibly other versions including 2.63, allows remote attackers to insert arbitrary web script or HTML via the Name textbox, possibly when the "Allow HTML in comments?" option is enabled.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://marc.info/?l=bugtraq&m=105284589927655&w=2
https://exchange.xforce.ibmcloud.com/vulnerabilities/12003
http://marc.info/?l=bugtraq&m=105277690132079&w=2
http://www.securityfocus.com/bid/7560
http://marc.info/?l=bugtraq&m=105276879622636&w=2

Exploit#

No public exploit known

History#

Version 12003-05-14Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.