CVE:CVE-2011-3993
CNNVD:CNNVD-201111-130
Six Apart Movable Type（MT）是美国Six Apart公司的一套博客（blog）系统。
Movable Type多个版本的插件存在使用弱权限。远程攻击者可借助未明向量修改文件和设置。这些版本包括：SKYARC MTCMS 5.252之前版本和MultiFileUploader 0.44以及之前版本，DuplicateEntry 1.2以及之前版本，MailPack 1.741以及之前版本和AutoTagging 0.08以及之前版本。
solution:Upgrade skyarc autotagging to a higher version than 0.08,and avoid the version (,0.08]; Upgrade skyarc duplicateentry to a higher version than 1.2,and avoid the version (,1.2]; Upgrade skyarc mailpack to a higher version than 1.741,and avoid the version (,1.741]; Upgrade skyarc mtcms to a higher version than 5.251,5.2,5.21,5.22,5.23,5.24,5.25,5.251,and avoid the version (,5.251],5.2,5.21,5.22,5.23,5.24,5.25,5.251; Upgrade skyarc multifileuploader to a higher version than 0.44,and avoid the version (,0.44]