CVE-2009-0752
CVE-2009-0752 is a critical-severity vulnerability in Sixapart Movable Type with a CVSS 2.0 base score of 10.0. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.
Key facts
- Severity: Critical (CVSS 2.0 base score 10.0)
- EPSS exploit prediction: 1% (69th percentile)
- Actively exploited: Not listed in CISA KEV
- Affected product: Sixapart Movable Type
- Published:
- Last modified:
Description
Unspecified vulnerability in Movable Type Pro and Community Solution 4.x before 4.24 has unknown impact and attack vectors, possibly related to the password recovery mechanism.
Frequently asked questions
- What is CVE-2009-0752?
- Unspecified vulnerability in Movable Type Pro and Community Solution 4.x before 4.24 has unknown impact and attack vectors, possibly related to the password recovery mechanism.
- How severe is CVE-2009-0752?
- CVE-2009-0752 has a CVSS 2.0 base score of 10.0, rated critical severity.
- Is CVE-2009-0752 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (69th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2009-0752?
- CVE-2009-0752 primarily affects Sixapart Movable Type. In total, 16 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
- How do I fix CVE-2009-0752?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.
- When was CVE-2009-0752 published?
- CVE-2009-0752 was published on 2009-03-03 and last updated on 2026-06-16.
References
Affected products (16)
- cpe:2.3:a:sixapart:movable_type:4.0:-:community_solution:*:*:*:*:*
- cpe:2.3:a:sixapart:movable_type:4.0:-:pro:*:*:*:*:*
- cpe:2.3:a:sixapart:movable_type:4.01:-:community_solution:*:*:*:*:*
- cpe:2.3:a:sixapart:movable_type:4.1:-:community_solution:*:*:*:*:*
- cpe:2.3:a:sixapart:movable_type:4.1:-:pro:*:*:*:*:*
- cpe:2.3:a:sixapart:movable_type:4.01:-:pro:*:*:*:*:*
- cpe:2.3:a:sixapart:movable_type:4.01:b:community_solution:*:*:*:*:*
- cpe:2.3:a:sixapart:movable_type:4.01:b:pro:*:*:*:*:*
- cpe:2.3:a:sixapart:movable_type:4.2:-:community_solution:*:*:*:*:*
- cpe:2.3:a:sixapart:movable_type:4.2:-:pro:*:*:*:*:*
- cpe:2.3:a:sixapart:movable_type:4.12:-:community_solution:*:*:*:*:*
- cpe:2.3:a:sixapart:movable_type:4.12:-:pro:*:*:*:*:*
- cpe:2.3:a:sixapart:movable_type:4.21:-:community_solution:*:*:*:*:*
- cpe:2.3:a:sixapart:movable_type:4.21:-:pro:*:*:*:*:*
- cpe:2.3:a:sixapart:movable_type:4.23:-:community_solution:*:*:*:*:*
- cpe:2.3:a:sixapart:movable_type:4.23:-:pro:*:*:*:*:*
More vulnerabilities in Sixapart Movable Type
- CVE-2026-33088 — Critical (CVSS 9.8): Movable Type provided by Six Apart Ltd. contains an SQL Injection vulnerability which may allow an attacker to execute…
- CVE-2026-25776 — Critical (CVSS 9.8): Movable Type provided by Six Apart Ltd. contains a code injection vulnerability which may allow an attacker to execute…
- CVE-2022-38078 — Critical (CVSS 9.8): Movable Type XMLRPC API provided by Six Apart Ltd. contains a command injection vulnerability. Sending a specially…
- CVE-2021-20837 — Critical (CVSS 9.8): Movable Type 7 r.5002 and earlier (Movable Type 7 Series), Movable Type 6.8.2 and earlier (Movable Type 6 Series),…
- CVE-2016-5742 — Critical (CVSS 9.8): SQL injection vulnerability in the XML-RPC interface in Movable Type Pro and Advanced 6.x before 6.1.3 and 6.2.x before…
- CVE-2020-5577 — High (CVSS 8.8): Movable Type series (Movable Type 7 r.4606 (7.2.1) and earlier (Movable Type 7), Movable Type Advanced 7 r.4606 (7.2.1)…