CVE-2008-5847

Constructr CMS 3.02.5 and earlier stores passwords in cleartext in a MySQL database, which allows context-dependent attackers to obtain sensitive information…

published January 5, 2009

CVSS
—
EPSS
2%
Percentile
77.9
In the wild
Unconfirmed
What it is

Constructr CMS 3.02.5 and earlier stores passwords in cleartext in a MySQL database, which allows context-dependent attackers to obtain sensitive information by reading the hash column.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01779 · 77.9th percentile
Published
2009-01-05T20:00Z
EPSS history
Timeline
  • 05 JAN 20:00Z
    Constructr CMS 3.02.5 and earlier stores passwords in cleartext in a MySQL database, which allows context-dependent attackers to obtain sensitive information…
    cvelistv5