Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2026-33088

Movable Type provided by Six Apart Ltd. contains an SQL Injection vulnerability which may allow an attacker to execute an arbitrary SQL statement.

Description

Movable Type provided by Six Apart Ltd. contains an SQL Injection vulnerability which may allow an attacker to execute an arbitrary SQL statement.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Six Apart Ltd. Movable Type

  • 9.1.0 and earlieraffected

Six Apart Ltd. Movable Type

  • 9.0.6 and earlieraffected

Six Apart Ltd. Movable Type

  • 8.8.2 and earlieraffected

Six Apart Ltd. Movable Type

  • 8.0.9 and earlieraffected

Six Apart Ltd. Movable Type Advanced

  • 9.1.0 and earlieraffected

Six Apart Ltd. Movable Type Advanced

  • 9.0.6 and earlieraffected

Six Apart Ltd. Movable Type Advanced

  • 8.8.2 and earlieraffected

Six Apart Ltd. Movable Type Advanced

  • 8.0.9 and earlieraffected

Six Apart Ltd. Movable Type Premium

  • 9.1.0 and earlieraffected

Six Apart Ltd. Movable Type Premium

  • 9.0.6 and earlieraffected

Six Apart Ltd. Movable Type Premium Advanced Edition

  • 9.1.0 and earlieraffected

Six Apart Ltd. Movable Type Premium Advanced Edition

  • 9.0.6 and earlieraffected

Six Apart Ltd. Movable Type Premium

  • 2.14 and earlieraffected

Six Apart Ltd. Movable Type Premium Advanced Edition

  • 2.14 and earlieraffected

Six Apart Ltd. Movable Type Premium (MT8-based)

  • 2.14 and earlieraffected

Six Apart Ltd. Movable Type

  • 5.1 to 5.18affected

Six Apart Ltd. Movable Type

  • 5.2affected
  • 5.2.1 to 5.2.13affected

Six Apart Ltd. Movable Type

  • 6.0affected
  • 6.0.1 to 6.8.8affected

Six Apart Ltd. Movable Type

  • 7 r.4207 to r.5510affected

Six Apart Ltd. Movable Type

  • 8.4.0 to 8.4.4affected

Six Apart Ltd. Movable Type

  • 1.0 to 1.68affected

References