CVE-2014-3749: Construtiva Cis Manager CMS

High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days.

SQL injection vulnerability in Construtiva CIS Manager allows remote attackers to execute arbitrary SQL commands via the email parameter to autenticar/lembrarlogin.asp.

Affected products

• Construtiva Cis Manager CMS: affected versions not specified

Published 2014-05-20. Last modified 2026-06-17.