{"id":"CVE-2012-0320","state":"PUBLISHED","title":"Movable Type before 4.38, 5.0x before 5.07, and 5.1x before 5.13 allows remote attackers to take control of sessions via unspecified vectors related to the (1) commenting feature a","description":"Movable Type before 4.38, 5.0x before 5.07, and 5.1x before 5.13 allows remote attackers to take control of sessions via unspecified vectors related to the (1) commenting feature and (2) community script.","publishedAt":"2012-03-03T02:00:00.000Z","updatedAt":"2024-08-06T18:23:30.494Z","severity":null,"assigner":"jpcert","products":["n/a n/a"],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":["http://www.movabletype.org/2012/02/movable_type_513_507_and_438_security_updates.html","http://jvn.jp/en/jp/JVN20083397/index.html","http://www.securityfocus.com/bid/52138","http://www.debian.org/security/2012/dsa-2423","http://www.securitytracker.com/id?1026738","http://www.movabletype.org/documentation/appendices/release-notes/513.html","http://jvndb.jvn.jp/jvndb/JVNDB-2012-000018"],"weaknesses":[],"ingestedAt":"2026-10-29T19:40:10.484Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2012/0xxx/CVE-2012-0320.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2012-0320","state":"PUBLISHED","datePublished":"2012-03-03T02:00:00.000Z","dateUpdated":"2024-08-06T18:23:30.494Z","assignerShortName":"jpcert","assignerOrgId":"ede6fdc4-6654-4307-a26d-3331c018e2ce","dateReserved":"2012-01-04T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Movable Type before 4.38, 5.0x before 5.07, and 5.1x before 5.13 allows remote attackers to take control of sessions via unspecified vectors related to the (1) commenting feature and (2) community script."}],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":[{"url":"http://www.movabletype.org/2012/02/movable_type_513_507_and_438_security_updates.html","tags":["x_refsource_CONFIRM"]},{"url":"http://jvn.jp/en/jp/JVN20083397/index.html","name":"JVN#20083397","tags":["third-party-advisory","x_refsource_JVN"]},{"url":"http://www.securityfocus.com/bid/52138","name":"52138","tags":["vdb-entry","x_refsource_BID"]},{"url":"http://www.debian.org/security/2012/dsa-2423","name":"DSA-2423","tags":["vendor-advisory","x_refsource_DEBIAN"]},{"url":"http://www.securitytracker.com/id?1026738","name":"1026738","tags":["vdb-entry","x_refsource_SECTRACK"]},{"url":"http://www.movabletype.org/documentation/appendices/release-notes/513.html","tags":["x_refsource_CONFIRM"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2012-000018","name":"JVNDB-2012-000018","tags":["third-party-advisory","x_refsource_JVNDB"]}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"jpcert","dateUpdated":"2018-01-17T19:57:01.000Z","orgId":"ede6fdc4-6654-4307-a26d-3331c018e2ce"},"datePublic":"2012-02-23T00:00:00.000Z","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"vultures@jpcert.or.jp","ID":"CVE-2012-0320","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Movable Type before 4.38, 5.0x before 5.07, and 5.1x before 5.13 allows remote attackers to take control of sessions via unspecified vectors related to the (1) commenting feature and (2) community script."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"http://www.movabletype.org/2012/02/movable_type_513_507_and_438_security_updates.html","refsource":"CONFIRM","url":"http://www.movabletype.org/2012/02/movable_type_513_507_and_438_security_updates.html"},{"name":"JVN#20083397","refsource":"JVN","url":"http://jvn.jp/en/jp/JVN20083397/index.html"},{"name":"52138","refsource":"BID","url":"http://www.securityfocus.com/bid/52138"},{"name":"DSA-2423","refsource":"DEBIAN","url":"http://www.debian.org/security/2012/dsa-2423"},{"name":"1026738","refsource":"SECTRACK","url":"http://www.securitytracker.com/id?1026738"},{"name":"http://www.movabletype.org/documentation/appendices/release-notes/513.html","refsource":"CONFIRM","url":"http://www.movabletype.org/documentation/appendices/release-notes/513.html"},{"name":"JVNDB-2012-000018","refsource":"JVNDB","url":"http://jvndb.jvn.jp/jvndb/JVNDB-2012-000018"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"http://www.movabletype.org/2012/02/movable_type_513_507_and_438_security_updates.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://jvn.jp/en/jp/JVN20083397/index.html","name":"JVN#20083397","tags":["third-party-advisory","x_refsource_JVN","x_transferred"]},{"url":"http://www.securityfocus.com/bid/52138","name":"52138","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://www.debian.org/security/2012/dsa-2423","name":"DSA-2423","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"http://www.securitytracker.com/id?1026738","name":"1026738","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://www.movabletype.org/documentation/appendices/release-notes/513.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2012-000018","name":"JVNDB-2012-000018","tags":["third-party-advisory","x_refsource_JVNDB","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-06T18:23:30.494Z"}}]}}}