Vulnerabilities

TI-2015-02599 CVE-2015-2945 · GHSA-jh8x-p66q-m6jw

mt-phpincgi.php in Hajime Fujimoto mt-phpincgi before 2015-05-15 does not properly…

LOW 36

mt-phpincgi.php in Hajime Fujimoto mt-phpincgi before 2015-05-15 does not properly restrict URLs, which allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via a crafted request…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01701 Published 2015-05-25 No fix listed CWE-94

TI-2007-06442 CVE-2007-6751 · GHSA-2rv4-2fqg-qr4w

Cross-site scripting (XSS) vulnerability in the MailForm plugin before 1.20 for Movable…

LOW 22

Cross-site scripting (XSS) vulnerability in the MailForm plugin before 1.20 for Movable Type allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01053 Published 2012-01-04 No fix listed CWE-79

Vulnerabilities

Filters

mt-phpincgi.php in Hajime Fujimoto mt-phpincgi before 2015-05-15 does not properly…

Cross-site scripting (XSS) vulnerability in the MailForm plugin before 1.20 for Movable…