← Database

CVE-2005-4689

MEDIUM CVSS: 5.0 Published: 2005-12-31 Modified: 2026-06-16

Description

Six Apart Movable Type 3.16 stores account names and password hashes in a cookie, which allows remote attackers to login to an account by sniffing the cookie.

Affected Platforms

Six Apart Movable Type

Weakness Type

NVD-CWE-Other

References