CVE-2008-5847 - Constructr CMS 3.02.5 and earlier stores passwords in cleartext in a MySQL database, which allows context-dependent attackers to obtain sensitive information by reading the hash column

Back Back to CVE browser

LOW

Constructr CMS 3.02.5 and earlier stores passwords in cleartext in a MySQL database, which allows context-dependent attackers to obtain sensitive information by reading the hash column

Published Jan 5, 2009

2.6

LOW

CVSS 2.0

EPSS 1.78%

Description

Constructr CMS 3.02.5 and earlier stores passwords in cleartext in a MySQL database, which allows context-dependent attackers to obtain sensitive information by reading the hash column.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-255

References (3)

http://securityreason.com/securityalert/4868
third-party-advisoryx_refsource_SREASON
https://euvd.enisa.europa.eu/vulnerability/EUVD-2008-5817
Advisory
https://www.exploit-db.com/exploits/7529
exploitx_refsource_EXPLOIT-DB

Link	Providers	Tags
http://securityreason.com/securityalert/4868		third-party-advisoryx_refsource_SREASON
https://euvd.enisa.europa.eu/vulnerability/EUVD-2008-5817		Advisory
https://www.exploit-db.com/exploits/7529		exploitx_refsource_EXPLOIT-DB