Movabletype Spam Vulnerability

[Guest schussat]

I came across this news this morning and thought the TCH community would appreciate it, since many of us run Movabletype: mt-send-entry.cgi can be hijacked to send spam that appears to come from your server (mt-send-entry.cgi is the script that powers the "email this entry" feature). If you're not using that feature, you're still vulnerable, and are advised to delete, rename, or change the permissions of the file. Otherwise, there's a new version of the script available to replace the old one. There's a bit more discussion at Jay Allen's blacklist HQ.

 

-Alan

[TCH-Sales]

Yeah I've seen more than a few talks about this online, something any blogger should keep an eye on for sure.