CVE-2008-5846: Sixapart Movable Type

Medium severity, CVSS 4.0. EPSS: 1% chance of exploitation in the next 30 days.

Six Apart Movable Type (MT) before 4.23 allows remote authenticated users with create permission for posts to bypass intended access restrictions and publish posts via a "system-wide entry listing screen."

Affected products

• Sixapart Movable Type: up to and including 4.21; version 3.0d only; version 3.1 only; version 3.01d only; version 3.2 only; version 3.3 only; …

Published 2009-01-05. Last modified 2026-06-16.