CVE-2011-2676: Ark-Web A-Form

Medium severity, CVSS 5.5. EPSS: 1.3% chance of exploitation in the next 30 days.

The A-Form and A-Form bamboo before 1.3.6 and 2.x before 2.0.3, and A-Form PC and PC/Mobile before 3.1, plug-ins for Movable Type do not require administrative authentication, which allows remote authenticated users to modify data via unspecified vectors.

Affected products

• Ark-Web A-Form: up to and including 1.3.5; version 2.0.2 only
• Ark-Web A-Form Bamboo: version 1.3.5 only; version 2.0.2 only
• Ark-Web A-Form Pc: up to and including 3.0
• Ark-Web A-Form Pc Mobile: up to and including 3.0

Published 2011-11-03. Last modified 2026-06-16.