CVE-2008-5847: Constructr Constructr-CMS

Low severity, CVSS 2.6. EPSS: 1.8% chance of exploitation in the next 30 days.

Constructr CMS 3.02.5 and earlier stores passwords in cleartext in a MySQL database, which allows context-dependent attackers to obtain sensitive information by reading the hash column.

Affected products

• Constructr Constructr-CMS: up to and including 3.02.5; version 3.00.0 only; version 3.00.1 only; version 3.00.2 only; version 3.01.0 only; version 3.01.1 only; …

Published 2009-01-05. Last modified 2026-06-16.