CVE-2008-5847 Constructr CMS 3.02.5 and earlier stores passwords in cleartext in a MySQL database, which allows context-dependent attackers to obtain sensitive information by reading the hash column.
LowCVSS 2.6
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Constructr CMS 3.02.5 and earlier stores passwords in cleartext in a MySQL database, which allows context-dependent attackers to obtain sensitive information by reading the hash column.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| constructr-cms | <= 3.02.5 | No fix listed |
| constructr-cms | = 3.00.0-alpha | No fix listed |
| constructr-cms | = 3.00.1-alpha | No fix listed |
| constructr-cms | = 3.00.2-alpha | No fix listed |
| constructr-cms | = 3.01.0-beta | No fix listed |
| constructr-cms | = 3.01.1-beta | No fix listed |
| constructr-cms | = 3.01.2-beta | No fix listed |
| constructr-cms | = 3.01.3-beta | No fix listed |
| constructr-cms | = 3.01.4-beta | No fix listed |
| constructr-cms | = 3.01.5-beta | No fix listed |
| constructr-cms | = 3.01.6-beta | No fix listed |
| constructr-cms | = 3.01.7-beta | No fix listed |
| constructr-cms | = 3.01.8-beta | No fix listed |
| constructr-cms | = 3.01.9-beta | No fix listed |
| constructr-cms | = 3.02.0 | No fix listed |
| constructr-cms | = 3.02.1 | No fix listed |
| constructr-cms | = 3.02.2 | No fix listed |
| constructr-cms | = 3.02.3 | No fix listed |
| constructr-cms | = 3.02.4 | No fix listed |