CVE:CVE-2011-5084
CNNVD:CNNVD-201204-001
Six Apart Movable Type（MT）是美国Six Apart公司的一套博客（blog）系统。
Movable Type 4.36之前的4.x版本和5.05之前的5.x版本中存在跨站脚本漏洞（XSS）。远程攻击者利用该漏洞借助未明向量注入任意web脚本或HTML。
solution:Upgrade sixapart movable_type to a higher version than 4.0,4.0:beta,4.0:beta2,4.0:beta3,4.0:beta4,4.0:beta5,4.0:beta6,4.0:beta7,4.0:rc1,4.0:rc2,4.0:rc3,4.01,4.1,4.1:beta,4.01:beta,4.1:beta2,4.01:beta2,4.1:rc1,4.01:rc1,4.2,4.2:rc2,4.2:rc4,4.2:rc5,4.12,4.15:beta1,4.15:beta3,4.15:beta4,4.21,4.22,4.23,4.24,4.25,4.26,4.27,4.28,4.29,4.35,4.36,4.261,4.291,4.292,5.0,5.0:beta1,5.0:beta2,5.0:beta3,5.0:beta4,5.0:rc1,5.0:rc2,5.0:rc3,5.01,5.02,5.03,5.04,5.05,5.031,and avoid the version 4.0,4.0:beta,4.0:beta2,4.0:beta3,4.0:beta4,4.0:beta5,4.0:beta6,4.0:beta7,4.0:rc1,4.0:rc2,4.0:rc3,4.01,4.1,4.1:beta,4.01:beta,4.1:beta2,4.01:beta2,4.1:rc1,4.01:rc1,4.2,4.2:rc2,4.2:rc4,4.2:rc5,4.12,4.15:beta1,4.15:beta3,4.15:beta4,4.21,4.22,4.23,4.24,4.25,4.26,4.27,4.28,4.29,4.35,4.36,4.261,4.291,4.292,5.0,5.0:beta1,5.0:beta2,5.0:beta3,5.0:beta4,5.0:rc1,5.0:rc2,5.0:rc3,5.01,5.02,5.03,5.04,5.05,5.031