CVE-2008-5859 - CVE House
Back to Database
Status published Medium CVE-2008-5859

SQL injection vulnerability in index.php in Constructr CMS 3.02.5 and...

Vulnerability Description

SQL injection vulnerability in index.php in Constructr CMS 3.02.5 and earlier, when register_globals is enabled and magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the show_page parameter.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2008-5859

Credits & Attribution

No credits recorded in the NVD database.

References

More from constructr

View All →
CVE-2008-5860
Directory traversal vulnerability in backend/template.php in Constructr CMS 3.02.5 and...
Medium 5.1
CVE-2008-5847
Constructr CMS 3.02.5 and earlier stores passwords in cleartext in...
Low 2.6

Affected Vendor

Affected Software

constructr-cms
Vulnerable Versions:
0, 3.00.0, 3.00.1, 3.00.2, 3.01.0, 3.01.1, 3.01.2, 3.01.3, 3.01.4, 3.01.5, 3.01.6, 3.01.7, 3.01.8, 3.01.9, 3.02.0, 3.02.1, 3.02.2, 3.02.3, 3.02.4

Timeline

Official Publish: January 6th, 2009
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.