CVE-2010-3922

CVE-2010-3922 describes a SQL injection vulnerability affecting Movable Type versions 4.x before 4.35 and 5.x before 5.04, allowing remote attackers to execute arbitrary SQL commands through unspecified vectors. With a CVSS score of 7.5, this vulnerability is considered highly severe, as it can be exploited remotely with low attack complexity and without authentication, potentially leading to compromise of confidentiality, integrity, and availability. Despite its severity, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion or media coverage surrounding this CVE.