Lucene search
+L

29 matches found

CVE
CVE
added 2009/01/06 5:0 p.m.48 views

CVE-2008-5860

CVE-2008-5860 affects Constructr CMS up to version 3.02.5, where a directory traversal flaw in backend/template.php can be exploited when register_globals is enabled and magic_quotes_gpc is disabled. The vulnerability allows a remote attacker to create or read arbitrary files via directory traver...

5.1CVSS7AI score0.02048EPSS
SaveExploits1References3Affected Software1
NVD
NVD
added 2009/01/05 8:30 p.m.18 views

CVE-2008-5847

Constructr CMS 3.02.5 and earlier stores passwords in cleartext in a MySQL database, which allows context-dependent attackers to obtain sensitive information by reading the hash column...

2.6CVSS6AI score0.01779EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2009/01/05 8:0 p.m.31 views

CVE-2008-5847

Constructr CMS 3.02.5 and earlier stores passwords in cleartext in a MySQL database, which allows context-dependent attackers to obtain sensitive information by reading the hash column...

6AI score0.01779EPSS
SaveExploits1References2
CVE
CVE
added 2009/01/05 8:0 p.m.57 views

CVE-2008-5847

CVE-2008-5847 affects Constructr CMS up to version 3.02.5, where passwords are stored in cleartext in a MySQL database. The underlying issue is insecure password storage (cleartext in the hash column), enabling context-dependent attackers to read sensitive password information from the database. ...

2.6CVSS6.1AI score0.01779EPSS
SaveExploits1References2Affected Software1
Packet Storm
Packet Storm
added 2008/12/30 12:0 a.m.17 views

Constructr CMS 3.02.5 SQL Injection / Traversal

Constructr CMS http://constructr-cms.org/ - = 3.02.5 "Stable" - magicquotesgpc = Off registerglobals = On - Directory Traversal - Source Disclosure - Arbitrary File Creation - Etc Etc Etc - http://site/constructr/backend/template.php?editfile= Db info: ../config/config.inc.php - SQL -...

0.5AI score
SaveExploits0
seebug.org
seebug.org
added 2008/12/21 12:0 a.m.15 views

Constructr CMS <= 3.02.5 Stable Multiple Remote Vulnerabilities

No description provided by source. Constructr CMS http://constructr-cms.org/ - = 3.02.5 "Stable" - magicquotesgpc = Off registerglobals = On - Directory Traversal - Source Disclosure - Arbitrary File Creation - Etc Etc Etc - http://site/constructr/backend/template.php?editfile= Db info:...

7.1AI score
SaveExploits0
zdt
zdt
added 2008/12/19 12:0 a.m.13 views

Constructr CMS <= 3.02.5 Stable Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications =============================================================== Constructr CMS = 3.02.5 Stable Multiple Remote Vulnerabilities =============================================================== Constructr CMS http://constructr-cms.org/ - =...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
added 2008/12/19 12:0 a.m.41 views

Constructr CMS 3.02.5 stable - Multiple Vulnerabilities

Constructr CMS http://constructr-cms.org/ - = 3.02.5 "Stable" - magicquotesgpc = Off registerglobals = On - Directory Traversal - Source Disclosure - Arbitrary File Creation - Etc Etc Etc - http://site/constructr/backend/template.php?editfile= Db info: ../config/config.inc.php - SQL -...

5.1CVSS5.8AI score0.02048EPSS
SaveExploits1
exploitpack
exploitpack
added 2008/12/19 12:0 a.m.17 views

Constructr CMS 3.02.5 stable - Multiple Vulnerabilities

Constructr CMS 3.02.5 stable - Multiple Vulnerabilities Constructr CMS http://constructr-cms.org/ - = 3.02.5 "Stable" - magicquotesgpc = Off registerglobals = On - Directory Traversal - Source Disclosure - Arbitrary File Creation - Etc Etc Etc - http://site/constructr/backend/template.php?editfil...

0.6AI score
SaveExploits0
Rows per page
Query Builder