Read the docs
TI-2009-02369 Aliases CVE-2009-2481GHSA-6q93-7ff8-58mr

mt-wizard.cgi in Six Apart Movable Type before 4.261, when global templates are not…

Priority LOW 29CWE-287Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Medium
Impact type
Security bypass
Confidentiality · integrity · availability
Partial · Partial · None
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-287.

Summary

mt-wizard.cgi in Six Apart Movable Type before 4.261, when global templates are not initialized, allows remote attackers to bypass access restrictions and (1) send e-mail to arbitrary addresses or (2) obtain sensitive information via unspecified vectors.

Why it matters now

EPSS 0.01233 69th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 57

CPEVersionsRoleVendor
cpe:2.3:a:six_apart:movable_type:1.54:*:enterprise:*:*:*:*:*1.54VulnerableSix Apart Ltd.
cpe:2.3:a:six_apart:movable_type:2.6:*:*:*:*:*:*:*2.6VulnerableSix Apart Ltd.
cpe:2.3:a:six_apart:movable_type:2.63:*:*:*:*:*:*:*2.63VulnerableSix Apart Ltd.
cpe:2.3:a:six_apart:movable_type:3.3:*:*:*:*:*:*:*3.3VulnerableSix Apart Ltd.
cpe:2.3:a:six_apart:movable_type:3.16:*:*:*:*:*:*:*3.16VulnerableSix Apart Ltd.
cpe:2.3:a:six_apart:movable_type:3.17:*:*:*:*:*:*:*3.17VulnerableSix Apart Ltd.
cpe:2.3:a:six_apart:movable_type:3.32:*:*:*:*:*:*:*3.32VulnerableSix Apart Ltd.
cpe:2.3:a:six_apart:movable_type:3.33:*:*:*:*:*:*:*3.33VulnerableSix Apart Ltd.
cpe:2.3:a:six_apart:movable_type:3.36:*:enterprise:*:*:*:*:*3.36VulnerableSix Apart Ltd.
cpe:2.3:a:six_apart:movable_type:4.20:*:*:*:*:*:*:*4.20VulnerableSix Apart Ltd.
  • cpe:2.3:a:six_apart:movable_type:1.54:*:enterprise:*:*:*:*:* Versions 1.54 Vulnerable ·Six Apart Ltd.
  • cpe:2.3:a:six_apart:movable_type:2.6:*:*:*:*:*:*:* Versions 2.6 Vulnerable ·Six Apart Ltd.
  • cpe:2.3:a:six_apart:movable_type:2.63:*:*:*:*:*:*:* Versions 2.63 Vulnerable ·Six Apart Ltd.
  • cpe:2.3:a:six_apart:movable_type:3.3:*:*:*:*:*:*:* Versions 3.3 Vulnerable ·Six Apart Ltd.
  • cpe:2.3:a:six_apart:movable_type:3.16:*:*:*:*:*:*:* Versions 3.16 Vulnerable ·Six Apart Ltd.
  • cpe:2.3:a:six_apart:movable_type:3.17:*:*:*:*:*:*:* Versions 3.17 Vulnerable ·Six Apart Ltd.
  • cpe:2.3:a:six_apart:movable_type:3.32:*:*:*:*:*:*:* Versions 3.32 Vulnerable ·Six Apart Ltd.
  • cpe:2.3:a:six_apart:movable_type:3.33:*:*:*:*:*:*:* Versions 3.33 Vulnerable ·Six Apart Ltd.
  • cpe:2.3:a:six_apart:movable_type:3.36:*:enterprise:*:*:*:*:* Versions 3.36 Vulnerable ·Six Apart Ltd.
  • cpe:2.3:a:six_apart:movable_type:4.20:*:*:*:*:*:*:* Versions 4.20 Vulnerable ·Six Apart Ltd.
Show 47 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:six_apart:movable_type:4.20:*:community_solution:*:*:*:*:*4.20VulnerableSix Apart Ltd.
cpe:2.3:a:six_apart:movable_type:4.20:*:enterprise:*:*:*:*:*4.20VulnerableSix Apart Ltd.
cpe:2.3:a:six_apart:movable_type:4.20:*:open_source:*:*:*:*:*4.20VulnerableSix Apart Ltd.
cpe:2.3:a:six_apart:movable_type:4.25:*:*:*:*:*:*:*4.25VulnerableSix Apart Ltd.
cpe:2.3:a:sixapart:movable_type:*:*:*:*:*:*:*:*up to 4.26VulnerableSixapart
cpe:2.3:a:sixapart:movable_type:1.00:*:enterprise:*:*:*:*:*1.00VulnerableSixapart
cpe:2.3:a:sixapart:movable_type:1.1:*:enterprise:*:*:*:*:*1.1VulnerableSixapart
cpe:2.3:a:sixapart:movable_type:1.2:*:enterprise:*:*:*:*:*1.2VulnerableSixapart
cpe:2.3:a:sixapart:movable_type:1.3:*:enterprise:*:*:*:*:*1.3VulnerableSixapart
cpe:2.3:a:sixapart:movable_type:1.4:*:enterprise:*:*:*:*:*1.4VulnerableSixapart
cpe:2.3:a:sixapart:movable_type:1.5:*:enterprise:*:*:*:*:*1.5VulnerableSixapart
cpe:2.3:a:sixapart:movable_type:1.31:*:enterprise:*:*:*:*:*1.31VulnerableSixapart
cpe:2.3:a:sixapart:movable_type:3.0d:*:*:*:*:*:*:*3.0dVulnerableSixapart
cpe:2.3:a:sixapart:movable_type:3.1:*:*:*:*:*:*:*3.1VulnerableSixapart
cpe:2.3:a:sixapart:movable_type:3.01d:*:*:*:*:*:*:*3.01dVulnerableSixapart
cpe:2.3:a:sixapart:movable_type:3.2:*:*:*:*:*:*:*3.2VulnerableSixapart
cpe:2.3:a:sixapart:movable_type:3.3:*:*:*:*:*:*:*3.3VulnerableSixapart
cpe:2.3:a:sixapart:movable_type:3.11:*:*:*:*:*:*:*3.11VulnerableSixapart
cpe:2.3:a:sixapart:movable_type:3.12:*:*:*:*:*:*:*3.12VulnerableSixapart
cpe:2.3:a:sixapart:movable_type:3.14:*:*:*:*:*:*:*3.14VulnerableSixapart
cpe:2.3:a:sixapart:movable_type:3.15:*:*:*:*:*:*:*3.15VulnerableSixapart
cpe:2.3:a:sixapart:movable_type:3.16:*:*:*:*:*:*:*3.16VulnerableSixapart
cpe:2.3:a:sixapart:movable_type:3.17:*:*:*:*:*:*:*3.17VulnerableSixapart
cpe:2.3:a:sixapart:movable_type:3.32:*:*:*:*:*:*:*3.32VulnerableSixapart
cpe:2.3:a:sixapart:movable_type:3.33:*:*:*:*:*:*:*3.33VulnerableSixapart
cpe:2.3:a:sixapart:movable_type:3.34:*:*:*:*:*:*:*3.34VulnerableSixapart
cpe:2.3:a:sixapart:movable_type:3.35:*:*:*:*:*:*:*3.35VulnerableSixapart
cpe:2.3:a:sixapart:movable_type:4.0:-:community_solution:*:*:*:*:*4.0VulnerableSixapart
cpe:2.3:a:sixapart:movable_type:4.0:-:pro:*:*:*:*:*4.0VulnerableSixapart
cpe:2.3:a:sixapart:movable_type:4.01:-:community_solution:*:*:*:*:*4.01VulnerableSixapart
cpe:2.3:a:sixapart:movable_type:4.1:-:community_solution:*:*:*:*:*4.1VulnerableSixapart
cpe:2.3:a:sixapart:movable_type:4.1:-:pro:*:*:*:*:*4.1VulnerableSixapart
cpe:2.3:a:sixapart:movable_type:4.01:-:pro:*:*:*:*:*4.01VulnerableSixapart
cpe:2.3:a:sixapart:movable_type:4.01:b:community_solution:*:*:*:*:*4.01 bVulnerableSixapart
cpe:2.3:a:sixapart:movable_type:4.01:b:pro:*:*:*:*:*4.01 bVulnerableSixapart
cpe:2.3:a:sixapart:movable_type:4.2:*:*:*:*:*:*:*4.2VulnerableSixapart
cpe:2.3:a:sixapart:movable_type:4.2:-:community_solution:*:*:*:*:*4.2VulnerableSixapart
cpe:2.3:a:sixapart:movable_type:4.2:-:pro:*:*:*:*:*4.2VulnerableSixapart
cpe:2.3:a:sixapart:movable_type:4.12:-:community_solution:*:*:*:*:*4.12VulnerableSixapart
cpe:2.3:a:sixapart:movable_type:4.12:-:pro:*:*:*:*:*4.12VulnerableSixapart
cpe:2.3:a:sixapart:movable_type:4.21:*:*:*:*:*:*:*4.21VulnerableSixapart
cpe:2.3:a:sixapart:movable_type:4.21:-:community_solution:*:*:*:*:*4.21VulnerableSixapart
cpe:2.3:a:sixapart:movable_type:4.21:-:pro:*:*:*:*:*4.21VulnerableSixapart
cpe:2.3:a:sixapart:movable_type:4.23:*:*:*:*:*:*:*4.23VulnerableSixapart
cpe:2.3:a:sixapart:movable_type:4.23:-:community_solution:*:*:*:*:*4.23VulnerableSixapart
cpe:2.3:a:sixapart:movable_type:4.23:-:pro:*:*:*:*:*4.23VulnerableSixapart
cpe:2.3:a:sixapart:movable_type:4.25:*:*:*:*:*:*:*4.25VulnerableSixapart
  • cpe:2.3:a:six_apart:movable_type:4.20:*:community_solution:*:*:*:*:* Versions 4.20 Vulnerable ·Six Apart Ltd.
  • cpe:2.3:a:six_apart:movable_type:4.20:*:enterprise:*:*:*:*:* Versions 4.20 Vulnerable ·Six Apart Ltd.
  • cpe:2.3:a:six_apart:movable_type:4.20:*:open_source:*:*:*:*:* Versions 4.20 Vulnerable ·Six Apart Ltd.
  • cpe:2.3:a:six_apart:movable_type:4.25:*:*:*:*:*:*:* Versions 4.25 Vulnerable ·Six Apart Ltd.
  • cpe:2.3:a:sixapart:movable_type:*:*:*:*:*:*:*:* Versions up to 4.26 Vulnerable ·Sixapart
  • cpe:2.3:a:sixapart:movable_type:1.00:*:enterprise:*:*:*:*:* Versions 1.00 Vulnerable ·Sixapart
  • cpe:2.3:a:sixapart:movable_type:1.1:*:enterprise:*:*:*:*:* Versions 1.1 Vulnerable ·Sixapart
  • cpe:2.3:a:sixapart:movable_type:1.2:*:enterprise:*:*:*:*:* Versions 1.2 Vulnerable ·Sixapart
  • cpe:2.3:a:sixapart:movable_type:1.3:*:enterprise:*:*:*:*:* Versions 1.3 Vulnerable ·Sixapart
  • cpe:2.3:a:sixapart:movable_type:1.4:*:enterprise:*:*:*:*:* Versions 1.4 Vulnerable ·Sixapart
  • cpe:2.3:a:sixapart:movable_type:1.5:*:enterprise:*:*:*:*:* Versions 1.5 Vulnerable ·Sixapart
  • cpe:2.3:a:sixapart:movable_type:1.31:*:enterprise:*:*:*:*:* Versions 1.31 Vulnerable ·Sixapart
  • cpe:2.3:a:sixapart:movable_type:3.0d:*:*:*:*:*:*:* Versions 3.0d Vulnerable ·Sixapart
  • cpe:2.3:a:sixapart:movable_type:3.1:*:*:*:*:*:*:* Versions 3.1 Vulnerable ·Sixapart
  • cpe:2.3:a:sixapart:movable_type:3.01d:*:*:*:*:*:*:* Versions 3.01d Vulnerable ·Sixapart
  • cpe:2.3:a:sixapart:movable_type:3.2:*:*:*:*:*:*:* Versions 3.2 Vulnerable ·Sixapart
  • cpe:2.3:a:sixapart:movable_type:3.3:*:*:*:*:*:*:* Versions 3.3 Vulnerable ·Sixapart
  • cpe:2.3:a:sixapart:movable_type:3.11:*:*:*:*:*:*:* Versions 3.11 Vulnerable ·Sixapart
  • cpe:2.3:a:sixapart:movable_type:3.12:*:*:*:*:*:*:* Versions 3.12 Vulnerable ·Sixapart
  • cpe:2.3:a:sixapart:movable_type:3.14:*:*:*:*:*:*:* Versions 3.14 Vulnerable ·Sixapart
  • cpe:2.3:a:sixapart:movable_type:3.15:*:*:*:*:*:*:* Versions 3.15 Vulnerable ·Sixapart
  • cpe:2.3:a:sixapart:movable_type:3.16:*:*:*:*:*:*:* Versions 3.16 Vulnerable ·Sixapart
  • cpe:2.3:a:sixapart:movable_type:3.17:*:*:*:*:*:*:* Versions 3.17 Vulnerable ·Sixapart
  • cpe:2.3:a:sixapart:movable_type:3.32:*:*:*:*:*:*:* Versions 3.32 Vulnerable ·Sixapart
  • cpe:2.3:a:sixapart:movable_type:3.33:*:*:*:*:*:*:* Versions 3.33 Vulnerable ·Sixapart
  • cpe:2.3:a:sixapart:movable_type:3.34:*:*:*:*:*:*:* Versions 3.34 Vulnerable ·Sixapart
  • cpe:2.3:a:sixapart:movable_type:3.35:*:*:*:*:*:*:* Versions 3.35 Vulnerable ·Sixapart
  • cpe:2.3:a:sixapart:movable_type:4.0:-:community_solution:*:*:*:*:* Versions 4.0 Vulnerable ·Sixapart
  • cpe:2.3:a:sixapart:movable_type:4.0:-:pro:*:*:*:*:* Versions 4.0 Vulnerable ·Sixapart
  • cpe:2.3:a:sixapart:movable_type:4.01:-:community_solution:*:*:*:*:* Versions 4.01 Vulnerable ·Sixapart
  • cpe:2.3:a:sixapart:movable_type:4.1:-:community_solution:*:*:*:*:* Versions 4.1 Vulnerable ·Sixapart
  • cpe:2.3:a:sixapart:movable_type:4.1:-:pro:*:*:*:*:* Versions 4.1 Vulnerable ·Sixapart
  • cpe:2.3:a:sixapart:movable_type:4.01:-:pro:*:*:*:*:* Versions 4.01 Vulnerable ·Sixapart
  • cpe:2.3:a:sixapart:movable_type:4.01:b:community_solution:*:*:*:*:* Versions 4.01 b Vulnerable ·Sixapart
  • cpe:2.3:a:sixapart:movable_type:4.01:b:pro:*:*:*:*:* Versions 4.01 b Vulnerable ·Sixapart
  • cpe:2.3:a:sixapart:movable_type:4.2:*:*:*:*:*:*:* Versions 4.2 Vulnerable ·Sixapart
  • cpe:2.3:a:sixapart:movable_type:4.2:-:community_solution:*:*:*:*:* Versions 4.2 Vulnerable ·Sixapart
  • cpe:2.3:a:sixapart:movable_type:4.2:-:pro:*:*:*:*:* Versions 4.2 Vulnerable ·Sixapart
  • cpe:2.3:a:sixapart:movable_type:4.12:-:community_solution:*:*:*:*:* Versions 4.12 Vulnerable ·Sixapart
  • cpe:2.3:a:sixapart:movable_type:4.12:-:pro:*:*:*:*:* Versions 4.12 Vulnerable ·Sixapart
  • cpe:2.3:a:sixapart:movable_type:4.21:*:*:*:*:*:*:* Versions 4.21 Vulnerable ·Sixapart
  • cpe:2.3:a:sixapart:movable_type:4.21:-:community_solution:*:*:*:*:* Versions 4.21 Vulnerable ·Sixapart
  • cpe:2.3:a:sixapart:movable_type:4.21:-:pro:*:*:*:*:* Versions 4.21 Vulnerable ·Sixapart
  • cpe:2.3:a:sixapart:movable_type:4.23:*:*:*:*:*:*:* Versions 4.23 Vulnerable ·Sixapart
  • cpe:2.3:a:sixapart:movable_type:4.23:-:community_solution:*:*:*:*:* Versions 4.23 Vulnerable ·Sixapart
  • cpe:2.3:a:sixapart:movable_type:4.23:-:pro:*:*:*:*:* Versions 4.23 Vulnerable ·Sixapart
  • cpe:2.3:a:sixapart:movable_type:4.25:*:*:*:*:*:*:* Versions 4.25 Vulnerable ·Sixapart

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2009-2481
  2. 2026-10-03 Alias added: GHSA-6q93-7ff8-58mr

References

Patch 1

Advisory 2

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences