Constructr Constructr-Cms
3 CVEs affecting Constructr Constructr-Cms. Latest disclosed: 2009-01-06. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2008-5860 | | 2009-01-06 | Directory traversal vulnerability in backend/template.php in Constructr CMS 3.02.5 and earlier, when register_globals is enabled and magic_quotes_gpc is disabl… | |
CVE-2008-5859 | | 2009-01-06 | SQL injection vulnerability in index.php in Constructr CMS 3.02.5 and earlier, when register_globals is enabled and magic_quotes_gpc is disabled, allows remote… | |
CVE-2008-5847 | | 2009-01-05 | Constructr CMS 3.02.5 and earlier stores passwords in cleartext in a MySQL database, which allows context-dependent attackers to obtain sensitive information b… |