oss-sec mailing list archives

CVEs assigned for Movable Type 4.36 and 5.05 security updates


From: Henri Salo <henri () nerv fi>
Date: Mon, 2 Apr 2012 18:25:12 +0300

http://www.movabletype.org/2011/05/movable_type_51_and_505_436_security_update.html

CVE-2011-5084: A remote attacker could execute arbitrary code in a logged-in users' web browser.
CVE-2011-5085: A remote attacker could read or modify the contents in the system under certain circumstances.

- Henri Salo


Current thread: