Launchpad.net

CVE 2010-3922

SQL injection vulnerability in Movable Type 4.x before 4.35 and 5.x before 5.04 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

See the CVE page on Mitre.org for more details.

References