Movable Type suffers from a flaw that allows for an arbitrary directory to be set during the creation of new blogs.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/57035/mtdirectory-06_034.txt
Source: https://packetstormsecurity.com/files/57035/mtdirectory-06_034.txt.html