Constructr
3 CVEs tracked since 2009. Since Jan 2009, none of them reached CISA KEV.
Constructr CVEs per month
| Month | CVEs | In CISA KEV |
|---|---|---|
| 2009-01 | 3 | 0 |
Products
The products that kept showing up in Constructr's monthly top three, with their CVEs summed over those months.
Latest CVEs
The 3 most recently published vulnerabilities affecting Constructr.
- CVE-2008-5860Directory traversal vulnerability in backend/template.php in Constructr CMS 3.02.5 and earlier, when register_globals is enabled and magic_quotes_gpc is disabled, allows remote attackers to create ...5.1
- CVE-2008-5859SQL injection vulnerability in index.php in Constructr CMS 3.02.5 and earlier, when register_globals is enabled and magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL co...5.1
- CVE-2008-5847Constructr CMS 3.02.5 and earlier stores passwords in cleartext in a MySQL database, which allows context-dependent attackers to obtain sensitive information by reading the hash column.2.6
The record
- Peak rank
- #25 in Jan 2009
- Busiest month shown
- Jan 2009, 3 CVEs
- Months with a KEV entry
- 0 since Jan 2009
- Monthly snapshots
- 1 since 2009