HTTP: Constructr CMS Multiple Vulnerabilities

This signature detects attempts to exploit multiple known vulnerabilities in Constructr CMS. An attacker can steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Extended Description

Constructr CMS is prone to multiple cross-site scripting and SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. Constructr CMS 3.03.0 is vulnerable; other versions may also be affected.

Affected Products

Constructr_cms constructr_cms

References

BugTraq: 46842

URL: http://www.zeroscience.mk/en/vulnerabilities/ZSL-2011-5001.php http://constructr-cms.org/

Short Name

HTTP:PHP:CONSTRUCTR-CMS-MUL

Severity

Minor

Recommended

False

Recommended Action

Drop

HTTP: Constructr CMS Multiple Vulnerabilities

Extended Description

Affected Products

References

Found a potential security threat?