CVE:CVE-2012-0320
CNNVD:CNNVD-201202-503
Six Apart Movable Type（MT）是美国Six Apart公司的一套博客（blog）系统。
Movable Type中存在漏洞，该漏洞源于某些借助文件管理系统的传输输入在使用前未经正确验证。攻击者可利用该漏洞注入并执行任意命令。
solution:Upgrade sixapart movable_type to a higher version than 4.37,4.28,4.29,4.36,4.291,4.292,4.361,5.0,5.01,5.1,5.02,5.04,5.05,5.06,5.11,5.12,5.051,4.292,4.0,4.0:beta,4.0:beta2,4.0:beta3,4.0:beta4,4.0:beta5,4.0:beta6,4.0:beta7,4.0:rc1,4.0:rc2,4.0:rc3,4.1:beta,4.1:beta2,4.1:rc1,4.2,4.2:rc2,4.2:rc4,4.2:rc5,4.12,4.15:beta1,4.15:beta3,4.15:beta4,4.22,4.23,4.24,4.25,4.26,4.27,4.35,4.37,4.261,5.0:beta1,5.0:beta2,5.0:beta3,5.0:beta4,5.0:rc1,5.0:rc2,5.0:rc3,5.1:beta,5.1:rc1,5.03,5.07,5.031,and avoid the version (,4.37],4.28,4.29,4.36,4.291,4.292,4.361,5.0,5.01,5.1,5.02,5.04,5.05,5.06,5.11,5.12,5.051,(,4.292],4.0,4.0:beta,4.0:beta2,4.0:beta3,4.0:beta4,4.0:beta5,4.0:beta6,4.0:beta7,4.0:rc1,4.0:rc2,4.0:rc3,4.1:beta,4.1:beta2,4.1:rc1,4.2,4.2:rc2,4.2:rc4,4.2:rc5,4.12,4.15:beta1,4.15:beta3,4.15:beta4,4.22,4.23,4.24,4.25,4.26,4.27,4.35,4.37,4.261,5.0:beta1,5.0:beta2,5.0:beta3,5.0:beta4,5.0:rc1,5.0:rc2,5.0:rc3,5.1:beta,5.1:rc1,5.03,5.07,5.031