Most recent entries from all

fkie_cve-2026-103668

An SQL Injection vulnerability exists in the Site Search function of Movable Type, which may allow an unauthenticated attacker to execute an arbitrary SQL query on the affected product.

GHSA-qjqp-9qgx-jwr5

An SQL Injection vulnerability exists in the Site Search function of Movable Type, which may allow an unauthenticated attacker to execute an arbitrary SQL query on the affected product.

jvndb-2026-000146

Movable Type provided by Six Apart Ltd. contains multiple vulnerabilities listed below:<a href='https://cwe.mitre.org/data/definitions/94.html' target='_blank'></a><a href='https://cwe.mitre.org/data/definitions/89.html' target='_blank'></a> <ul><li>Code Injection in the Upgrade Script (CWE-94) - CVE-2026-96408</li><li>SQL Injection in the Site Search function (CWE-89) - CVE-2026-103668</li></ul> In addition, multiple vulnerabilities have been addressed. For details, refer to the information provided by the developer. RyotaK of GMO Flatt Security Inc. reported these vulnerabilities to the developer and coordinated. After the coordination was completed, the developer reported the case to JPCERT/CC to notify users of the solution through JVN.