CVE-2005-4689

Medium severity, CVSS 5.0. EPSS: 1.2% chance of exploitation in the next 30 days.

Six Apart Movable Type 3.16 stores account names and password hashes in a cookie, which allows remote attackers to login to an account by sniffing the cookie.

Published 2005-12-31. Last modified 2026-06-16.