CVE:CVE-2012-0318
CNNVD:CNNVD-201202-501
Six Apart Movable Type（MT）是美国Six Apart公司的一套博客（blog）系统。
Movable Type中存在漏洞，该漏洞源于应用程序允许用户借助HTTP请求，在未对请求执行正确有效性检查的情况下执行某些操作。攻击者可利用该漏洞执行任意脚本代码(当进入系统的用户访问特制的网页时)。
solution:Upgrade movabletype movable_type_open_source to a higher version than 4.37,4.0,4.0:beta,4.1,4.1:beta,4.01:beta,4.2,4.2:beta,4.3,4.23,4.25,4.26,4.31,4.32,4.33,4.34,4.35,4.36,4.261,4.361,5.1,5.02,5.03,5.04,5.05,5.06,5.11,5.12,5.031,5.051,and avoid the version (,4.37],4.0,4.0:beta,4.1,4.1:beta,4.01:beta,4.2,4.2:beta,4.3,4.23,4.25,4.26,4.31,4.32,4.33,4.34,4.35,4.36,4.261,4.361,5.1,5.02,5.03,5.04,5.05,5.06,5.11,5.12,5.031,5.051; Upgrade movabletype movable_type_enterprise to a higher version than 4.37,4.0,4.0:beta,4.1,4.01:beta,4.1:beta,4.2,4.2:beta,4.3,4.23,4.25,4.26,4.31,4.32,4.33,4.34,4.35,4.36,4.261,4.361,5.1,5.02,5.03,5.04,5.05,5.06,5.11,5.12,5.031,5.051,and avoid the version (,4.37],4.0,4.0:beta,4.1,4.01:beta,4.1:beta,4.2,4.2:beta,4.3,4.23,4.25,4.26,4.31,4.32,4.33,4.34,4.35,4.36,4.261,4.361,5.1,5.02,5.03,5.04,5.05,5.06,5.11,5.12,5.031,5.051; Upgrade movabletype movable_type_advanced to a higher version than 4.37,4.0,4.0:beta,4.1,4.01:beta,4.1:beta,4.2,4.2:beta,4.3,4.23,4.25,4.26,4.31,4.32,4.33,4.34,4.35,4.36,4.261,4.361,5.1,5.02,5.03,5.04,5.05,5.06,5.11,5.12,5.031,5.051,and avoid the version (,4.37],4.0,4.0:beta,4.1,4.01:beta,4.1:beta,4.2,4.2:beta,4.3,4.23,4.25,4.26,4.31,4.32,4.33,4.34,4.35,4.36,4.261,4.361,5.1,5.02,5.03,5.04,5.05,5.06,5.11,5.12,5.031,5.051; Upgrade movabletype movable_type_pro to a higher version than 4.37,4.0,4.0:beta,4.1,4.1:beta,4.01:beta,4.2,4.2:beta,4.3,4.23,4.25,4.26,4.31,4.32,4.33,4.34,4.35,4.36,4.261,4.361,5.1,5.02,5.03,5.04,5.05,5.06,5.11,5.12,5.031,5.051,and avoid the version (,4.37],4.0,4.0:beta,4.1,4.1:beta,4.01:beta,4.2,4.2:beta,4.3,4.23,4.25,4.26,4.31,4.32,4.33,4.34,4.35,4.36,4.261,4.361,5.1,5.02,5.03,5.04,5.05,5.06,5.11,5.12,5.031,5.051