CVE:CVE-2012-0317
CNNVD:CNNVD-201202-500
Six Apart Movable Type（MT）是美国Six Apart公司的一套博客（blog）系统。
Movable Type中存在漏洞，该漏洞源于某些借助模板的传输输入在返回给用户前未经正确过滤。攻击者可利用该漏洞在受影响站点上下文的用户浏览器会话上，执行任意HTML和脚本代码。
solution:Upgrade sixapart movable_type to a higher version than 4.37,4.28,4.29,4.36,4.291,4.292,4.361,5.0,5.01,5.1,5.02,5.04,5.05,5.06,5.11,5.12,5.051,4.292,4.0,4.0:beta,4.0:beta2,4.0:beta3,4.0:beta4,4.0:beta5,4.0:beta6,4.0:beta7,4.0:rc1,4.0:rc2,4.0:rc3,4.1:beta,4.1:beta2,4.1:rc1,4.2,4.2:rc2,4.2:rc4,4.2:rc5,4.12,4.15:beta1,4.15:beta3,4.15:beta4,4.22,4.23,4.24,4.25,4.26,4.27,4.35,4.37,4.261,5.0:beta1,5.0:beta2,5.0:beta3,5.0:beta4,5.0:rc1,5.0:rc2,5.0:rc3,5.1:beta,5.1:rc1,5.03,5.07,5.031,and avoid the version (,4.37],4.28,4.29,4.36,4.291,4.292,4.361,5.0,5.01,5.1,5.02,5.04,5.05,5.06,5.11,5.12,5.051,(,4.292],4.0,4.0:beta,4.0:beta2,4.0:beta3,4.0:beta4,4.0:beta5,4.0:beta6,4.0:beta7,4.0:rc1,4.0:rc2,4.0:rc3,4.1:beta,4.1:beta2,4.1:rc1,4.2,4.2:rc2,4.2:rc4,4.2:rc5,4.12,4.15:beta1,4.15:beta3,4.15:beta4,4.22,4.23,4.24,4.25,4.26,4.27,4.35,4.37,4.261,5.0:beta1,5.0:beta2,5.0:beta3,5.0:beta4,5.0:rc1,5.0:rc2,5.0:rc3,5.1:beta,5.1:rc1,5.03,5.07,5.031