https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-20T18:52:26.486339+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2012-1497 CVE-2012-1497 2026-10-20T18:52:26.487604+00:00

The default configuration of Movable Type before 4.38, 5.0x before 5.07, and 5.1x before 5.13 supports the "mt:Include file=" attribute, which allows remote authenticated users to conduct directory traversal attacks and read arbitrary files by leveraging the template-designer role.