Constructr-cms (Constructr) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 19 known versions, newest CVE from 2009-01-06. Vendor: Constructr.

CVEs of Constructr-cms

• CVE-2008-5860 - CVSS 5.1 (medium), 2009-01-06: Directory traversal vulnerability in backend/template.php in Constructr CMS 3.02.5 and earlier, when register_globals is enabled and magic_quotes_gpc is…
• CVE-2008-5859 - CVSS 5.1 (medium), 2009-01-06: SQL injection vulnerability in index.php in Constructr CMS 3.02.5 and earlier, when register_globals is enabled and magic_quotes_gpc is disabled, allows…
• CVE-2008-5847 - CVSS 2.6 (low), 2009-01-05: Constructr CMS 3.02.5 and earlier stores passwords in cleartext in a MySQL database, which allows context-dependent attackers to obtain sensitive information…