CVE-2008-5847 - CVE House
Back to Database
Status published Low CVE-2008-5847

Constructr CMS 3.02.5 and earlier stores passwords in cleartext in...

Vulnerability Description

Constructr CMS 3.02.5 and earlier stores passwords in cleartext in a MySQL database, which allows context-dependent attackers to obtain sensitive information by reading the hash column.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2008-5847

Credits & Attribution

No credits recorded in the NVD database.

References

More from constructr

View All →
CVE-2008-5860
Directory traversal vulnerability in backend/template.php in Constructr CMS 3.02.5 and...
Medium 5.1
CVE-2008-5859
SQL injection vulnerability in index.php in Constructr CMS 3.02.5 and...
Medium 5.1

Affected Vendor

Affected Software

constructr-cms
Vulnerable Versions:
0, 3.00.0, 3.00.1, 3.00.2, 3.01.0, 3.01.1, 3.01.2, 3.01.3, 3.01.4, 3.01.5, 3.01.6, 3.01.7, 3.01.8, 3.01.9, 3.02.0, 3.02.1, 3.02.2, 3.02.3, 3.02.4

Timeline

Official Publish: January 5th, 2009
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.