CVE-2012-0320

Movable Type before 4.38, 5.0x before 5.07, and 5.1x before 5.13 allows remote attackers to take...

7.5 HighFix available

Movable Type before 4.38, 5.0x before 5.07, and 5.1x before 5.13 allows remote attackers to take control of sessions via unspecified vectors related to the (1) commenting feature and (2) community script.

Exploit likelihood

2.58%Up 1.3 points since Feb 4, 2022

What each source reports

NVD Score used 7.5

Record: CVE-2012-0320
CVSS 2.0: 7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Updated: 2026-11-02

CVE List No score

Record: CVE-2012-0320
Updated: 2026-11-02

EUVDEUVD-2012-0356 No score

Record: EUVD-2012-0356
Updated: 2026-11-03

GitHub AdvisoriesGHSA-qc2v-4qpc-hvf2 No score

Movable Type before 4.38, 5.0x before 5.07, and 5.1x before 5.13 allows remote attackers to take...

Record: GHSA-qc2v-4qpc-hvf2
Updated: 2026-11-02

Affected products

sixapart movable type

Affected packages

Affected packages
Package	Affected	Fixed
`movabletype-opensource` Debian:6.0	before 4.3.8+dfsg-0+squeeze2, plus listed versions 4.3.5+dfsg-24.3.5+dfsg-2+squeeze14.3.5+dfsg-2+squeeze24.3.5+dfsg-34.3.6+dfsg-14.3.6.1+dfsg-14.3.7+dfsg-1	4.3.8+dfsg-0+squeeze2

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2012-0320 is a high vulnerability (CVSS 7.5) in Sixapart Movable Type, published March 2, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.58%, the 85th percentile. Fixed in movabletype-opensource 4.3.8+dfsg-0+squeeze2.