CVE-2005-4689

Six Apart Movable Type 3.16 stores account names and password hashes in a cookie, which allows remote attackers to login to an account by sniffing the cookie.

Score
CVSS 2.0 5.0 Medium
Status
Modified - cve@mitre.org
Published
2005-12-31
Last modified
2024-09-16

References

 
 
© AVABIS GmbH privacypolicy about