CVE-2008-5846
Six Apart Movable Type (MT) before 4.23 allows remote authenticated users with create permission for posts to bypass intended access restrictions and publish posts via a "system…
Published: 2009-01-05 · CVSS: Unscored
Six Apart Movable Type (MT) before 4.23 allows remote authenticated users with create permission for posts to bypass intended access restrictions and publish posts via a "system-wide entry listing screen."
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7