Most recent entries from all

fkie_cve-2026-96408

A code injection vulnerability exists in the upgrade script of Movable Type, which may allow an unauthenticated attacker to execute an arbitrary Perl script or an SQL query on the affected product.

GHSA-9xxq-384j-m3qw

A code injection vulnerability exists in the upgrade script of Movable Type, which may allow an unauthenticated attacker to execute an arbitrary Perl script or an SQL query on the affected product.

jvndb-2026-000146

Movable Type provided by Six Apart Ltd. contains multiple vulnerabilities listed below:<a href='https://cwe.mitre.org/data/definitions/94.html' target='_blank'></a><a href='https://cwe.mitre.org/data/definitions/89.html' target='_blank'></a> <ul><li>Code Injection in the Upgrade Script (CWE-94) - CVE-2026-96408</li><li>SQL Injection in the Site Search function (CWE-89) - CVE-2026-103668</li></ul> In addition, multiple vulnerabilities have been addressed. For details, refer to the information provided by the developer. RyotaK of GMO Flatt Security Inc. reported these vulnerabilities to the developer and coordinated. After the coordination was completed, the developer reported the case to JPCERT/CC to notify users of the solution through JVN.