mailing list archives
Re: CSS found in Movable Type
From: Jordan Wiens <jwiens () nersp nerdc ufl edu>
Date: Mon, 12 May 2003 16:00:24 -0400 (EDT)
I just tried it on an installed 2.63 MT and was unable to get the XSS to
field, all with no success. MT properly elminated < > tags and left the
< as <, not allowing any execution.
UF Network Incident Response Team
On Mon, 12 May 2003, DarkHunter wrote:
Movable Type is a decentralized web-based personal publishing system
designed to ease maintenance of regularly-updated content. This content
can consist of, but is not limited to, entries in a weblog or online
journal, photographs in an online photo gallery, news headlines on a
newspaper site, or articles in an online magazine.
Vendor's site: www.movabletype.org
Movable Type version 2.63 and prior.