What’s Vulnerable › Vulnerabilities

CVE-2008-5846

• Severity: medium (CVSS 4.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2009-01-05 · updated 2026-06-16
• Weakness: CWE-264

Description

Six Apart Movable Type (MT) before 4.23 allows remote authenticated users with create permission for posts to bypass intended access restrictions and publish posts via a "system-wide entry listing screen."

Affected products

• Six Apart Ltd. Movable Type: through 4.21; 3.0d, 3.1, 3.01d, 3.2, 3.3, 3.11 (+10)

References

• http://www.movabletype.org/mt_423_change_log.html
• http://www.securityfocus.com/bid/33133
• https://exchange.xforce.ibmcloud.com/vulnerabilities/47759
• http://www.movabletype.org/mt_423_change_log.html
• http://www.securityfocus.com/bid/33133
• https://exchange.xforce.ibmcloud.com/vulnerabilities/47759

Get alerted when CVE-2008-5846 or the next vulnerability affects your stack