CVE-2008-5847

Published: Jan 5, 2009Modified: Apr 23, 2026

2.6

Vector

AV:N/AC:H/Au:N/C:P/I:N/A:N

Exploitability: 4.9 / Impact: 2.9

Source: NVD

Description

Constructr CMS 3.02.5 and earlier stores passwords in cleartext in a MySQL database, which allows context-dependent attackers to obtain sensitive information by reading the hash column.

Affected (19)

Products: Constructr: Constructr Cms

Constructr

1 product

Constructr Cms

Configuration A

19 vulnerable

Vulnerable Software	Affected Versions
Constructr Constructr Cms	Up to 3.02.5
Constructr Constructr Cms	Version 3.00.0 alpha
Constructr Constructr Cms	Version 3.00.1 alpha
Constructr Constructr Cms	Version 3.00.2 alpha
Constructr Constructr Cms	Version 3.01.0 beta
Constructr Constructr Cms	Version 3.01.1 beta
Constructr Constructr Cms	Version 3.01.2 beta
Constructr Constructr Cms	Version 3.01.3 beta
Constructr Constructr Cms	Version 3.01.4 beta
Constructr Constructr Cms	Version 3.01.5 beta
Constructr Constructr Cms	Version 3.01.6 beta
Constructr Constructr Cms	Version 3.01.7 beta
Constructr Constructr Cms	Version 3.01.8 beta
Constructr Constructr Cms	Version 3.01.9 beta
Constructr Constructr Cms	Version 3.02.0
Constructr Constructr Cms	Version 3.02.1
Constructr Constructr Cms	Version 3.02.2
Constructr Constructr Cms	Version 3.02.3
Constructr Constructr Cms	Version 3.02.4

Related CWEs

CWE-255

References (4)

http://securityreason.com/securityalert/4868

Source: cve@mitre.org

https://www.exploit-db.com/exploits/7529

Source: cve@mitre.org

http://securityreason.com/securityalert/4868

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.exploit-db.com/exploits/7529

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.