{"id":"CVE-2012-0320","aliases":["DSA-2423-1","EUVD-2012-0356","GHSA-qc2v-4qpc-hvf2"],"status":"published","title":"Movable Type before 4.38, 5.0x before 5.07, and 5.1x before 5.13 allows remote attackers to take...","description":"Movable Type before 4.38, 5.0x before 5.07, and 5.1x before 5.13 allows remote attackers to take control of sessions via unspecified vectors related to the (1) commenting feature and (2) community script.","severity":{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.0258,"percentile":0.85322,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2012-03-02T00:00:00Z","modified":"2026-06-16T23:37:06Z","affected":[{"source":"osv","ecosystem":"Debian:6.0","package":"movabletype-opensource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.8+dfsg-0+squeeze2"}]}],"versions":["4.3.5+dfsg-2","4.3.5+dfsg-2+squeeze1","4.3.5+dfsg-2+squeeze2","4.3.5+dfsg-3","4.3.6+dfsg-1","4.3.6.1+dfsg-1","4.3.7+dfsg-1"],"bundled":8}],"products":[{"vendor":"sixapart","product":"movable_type"}],"references":[{"url":"http://www.movabletype.org/2012/02/movable_type_513_507_and_438_security_updates.html","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"http://jvn.jp/en/jp/JVN20083397/index.html","tags":["third-party-advisory","x_refsource_JVN","x_transferred"]},{"url":"http://www.securityfocus.com/bid/52138","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://www.debian.org/security/2012/dsa-2423","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"http://www.securitytracker.com/id?1026738","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://www.movabletype.org/documentation/appendices/release-notes/513.html","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2012-000018","tags":["third-party-advisory","x_refsource_JVNDB","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-0320"},{"url":"https://github.com/advisories/GHSA-qc2v-4qpc-hvf2"}],"sources":{"cve":[{"id":"CVE-2012-0320","description":"Movable Type before 4.38, 5.0x before 5.07, and 5.1x before 5.13 allows remote attackers to take control of sessions via unspecified vectors related to the (1) commenting feature and (2) community script.","status":"published","published":"2012-03-03T02:00:00Z","modified":"2024-08-06T18:23:30.494Z","updated_at":"2026-11-02T14:34:52.638543Z"}],"euvd":[{"id":"EUVD-2012-0356","description":"Movable Type before 4.38, 5.0x before 5.07, and 5.1x before 5.13 allows remote attackers to take control of sessions via unspecified vectors related to the (1) commenting feature and (2) community script.","status":"published","published":"2012-03-03T02:00:00Z","modified":"2024-08-06T18:23:30Z","updated_at":"2026-11-03T01:56:21.720277Z"}],"ghsa":[{"id":"GHSA-qc2v-4qpc-hvf2","title":"Movable Type before 4.38, 5.0x before 5.07, and 5.1x before 5.13 allows remote attackers to take...","description":"Movable Type before 4.38, 5.0x before 5.07, and 5.1x before 5.13 allows remote attackers to take control of sessions via unspecified vectors related to the (1) commenting feature and (2) community script.","status":"published","published":"2022-05-04T00:29:22Z","modified":"2023-02-01T05:01:41Z","updated_at":"2026-11-02T14:49:45.784088Z"}],"nvd":[{"id":"CVE-2012-0320","description":"Movable Type before 4.38, 5.0x before 5.07, and 5.1x before 5.13 allows remote attackers to take control of sessions via unspecified vectors related to the (1) commenting feature and (2) community script.","status":"published","published":"2012-03-03T04:04:57.75Z","modified":"2026-06-16T23:37:06.443Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:02:13.468343Z"}],"osv":[{"id":"DSA-2423-1","title":"movabletype-opensource - several","status":"published","published":"2012-03-02T00:00:00Z","modified":"2026-03-09T01:22:14.481637Z","updated_at":"2026-11-02T15:46:15.489951Z"}]}}