CVE-2008-5847

CVE-2008-5847 · LOW Severity

AV:N/AC:H/AU:N/C:P/I:N/A:N

Constructr CMS 3.02.5 and earlier stores passwords in cleartext in a MySQL database, which allows context-dependent attackers to obtain sensitive information by reading the hash column.

Learn more about our Cis Benchmark Audit For Microsoft Sql Server.