← Database

CVE-2005-3101

MEDIUM CVSS: 5.0 Published: 2005-09-28 Modified: 2026-06-16

Description

The password reset feature in Movable Type before 3.2 generates different error messages depending on whether a user exists or not, which allows remote attackers to determine valid usernames.

Affected Platforms

Six Apart Movable Type

Weakness Type

NVD-CWE-Other

References