Signature Detail

HTTP: Constructr CMS Multiple Vulnerabilities

This signature detects attempts to exploit multiple known vulnerabilities in Constructr CMS. An attacker can steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Extended Description

Constructr CMS is prone to multiple cross-site scripting and SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. Constructr CMS 3.03.0 is vulnerable; other versions may also be affected.

Affected Products

• Constructr_cms constructr_cms 3.03.3

References

• BugTraq: 46842
• URL: http://www.zeroscience.mk/en/vulnerabilities/ZSL-2011-5001.php
• URL: http://constructr-cms.org/