{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,9.1.0)"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Movable Type", "source": "cna", "vendor": "Six Apart Ltd."}, "product": "movable_type", "vendor": "six_apart"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,9.0.6)"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Movable Type", "source": "cna", "vendor": "Six Apart Ltd."}, "product": "movable_type", "vendor": "six_apart"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,8.8.2)"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Movable Type", "source": "cna", "vendor": "Six Apart Ltd."}, "product": "movable_type", "vendor": "six_apart"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,8.0.9)"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Movable Type", "source": "cna", "vendor": "Six Apart Ltd."}, "product": "movable_type", "vendor": "six_apart"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,2.14)"}}], "enrichment": {"confidence": 85.0, "confidence_source": "matching", "scores": [{"score": 95.0, "source": "inferred"}, {"score": 85.0, "source": "matching"}]}, "original": {"product": "Movable Type Premium", "source": "cna", "vendor": "Six Apart Ltd."}, "product": "movable_type", "vendor": "six_apart"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[5.1,5.18]"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Movable Type", "source": "cna", "vendor": "Six Apart Ltd."}, "product": "movable_type", "vendor": "six_apart"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "5.2"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[5.2.1,5.2.13]"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Movable Type", "source": "cna", "vendor": "Six Apart Ltd."}, "product": "movable_type", "vendor": "six_apart"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "6.0"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[6.0.1,6.8.8]"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Movable Type", "source": "cna", "vendor": "Six Apart Ltd."}, "product": "movable_type", "vendor": "six_apart"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[r.4207,r.5510]"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Movable Type", "source": "cna", "vendor": "Six Apart Ltd."}, "product": "movable_type", "vendor": "six_apart"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[8.4.0,8.4.4]"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Movable Type", "source": "cna", "vendor": "Six Apart Ltd."}, "product": "movable_type", "vendor": "six_apart"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[1.0,1.68]"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Movable Type", "source": "cna", "vendor": "Six Apart Ltd."}, "product": "movable_type", "vendor": "six_apart"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,2.14)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "Movable Type Premium (MT8-based)", "source": "cna", "vendor": "Six Apart Ltd."}, "product": "movable_type_premium_(mt8-based)", "vendor": "six_apart"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,9.1.0)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "Movable Type Premium Advanced Edition", "source": "cna", "vendor": "Six Apart Ltd."}, "product": "movable_type_premium_advanced_edition", "vendor": "six_apart"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,9.0.6)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "Movable Type Premium Advanced Edition", "source": "cna", "vendor": "Six Apart Ltd."}, "product": "movable_type_premium_advanced_edition", "vendor": "six_apart"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,2.14)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "Movable Type Premium Advanced Edition", "source": "cna", "vendor": "Six Apart Ltd."}, "product": "movable_type_premium_advanced_edition", "vendor": "six_apart"}], "analysis": {"en": {"generated_at": "2026-04-08T11:05:37.871563+00:00", "value": {"mitigation_remediation": ["Verify whether Six\u202fApart has released a patch that addresses this SQL injection vulnerability and apply it immediately.", "If a patch is unavailable, limit the database account used by Movable\u202fType to the minimal privileges required for normal operation.", "Deploy input validation or a web application firewall rule set to block common SQL injection patterns."], "summary": {"action": "Apply Patch", "impact": "SQL injection allowing arbitrary SQL execution"}, "threat_synthesis": {"affected_systems": "All editions of Movable\u202fType released by Six\u202fApart Ltd\u2014standard, Advanced, Premium, Premium Advanced Edition and the MT8\u2011based Premium build\u2014are affected. No specific product versions are listed; therefore any publicly accessible installation may be vulnerable until a fix is applied.", "description_and_impact": "Movable\u202fType, a content management system from Six\u202fApart Ltd., contains an SQL injection flaw. The vulnerability permits attackers to execute arbitrary SQL statements against the application\u2019s database, potentially exposing, modifying, or deleting sensitive data and compromising the integrity of stored information.", "risk_and_exploitability": "The CVSS score of 6.9 indicates medium severity, while no EPSS score or CISA KEV listing is available. The advisory does not state authentication requirements, so it is inferred that the injection can be triggered via web input, implying a remote attack vector over the public network. If the database credentials used by Movable\u202fType possess high privileges, exploitation could lead to full data compromise."}}}}, "created": "2026-04-08T19:39:59.791974+00:00", "title": "SQL Injection in Movable\u202fType Enables Arbitrary Database Access", "updated": "2026-04-09T08:21:56.939936+00:00", "vendors": ["six_apart", "six_apart$PRODUCT$movable_type", "six_apart$PRODUCT$movable_type_premium_(mt8-based)", "six_apart$PRODUCT$movable_type_premium_advanced_edition"]}
CVE record
NVD configurations
Red Hat packages
No data
OpenCVE enrichment
