CVE-2012-0320 Auth bypass in n/a

What is CVE-2012-0320?

CVE-2012-0320 is a high-severity authentication bypass vulnerability in n/a, published on 3 Mar 2012. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Movable Type before 4.38, 5.0x before 5.07, and 5.1x before 5.13 allows remote attackers to take control of sessions via unspecified vectors related to the (1) commenting feature and (2) community script.

Which versions are affected by CVE-2012-0320?

It affects 1 product.

Products include Sixapart Movable Type.

How do I fix CVE-2012-0320?

Upgrade to a fixed version.

Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.

Is CVE-2012-0320 being exploited?

There is no known exploitation of CVE-2012-0320 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2009-0752 Other in n/a Critical 10.0
• CVE-2022-38078 Command injection in Movable Type XMLRPC API Critical 9.8
• CVE-2021-20837 Command injection in Movable Type Critical 9.8
• CVE-2016-5742 SQL injection in n/a Critical 9.8
• CVE-2026-25776 Code injection in Movable Type Critical 9.3

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-qc2v-4qpc-hvf2.