CVE-2005-3101: Six Apart Movable Type

Medium severity, CVSS 5.0. EPSS: 1.4% chance of exploitation in the next 30 days.

The password reset feature in Movable Type before 3.2 generates different error messages depending on whether a user exists or not, which allows remote attackers to determine valid usernames.

Affected products

• Six Apart Movable Type: version 3.17 only

Published 2005-09-28. Last modified 2026-06-16.