CVE-2008-5847

CVE-2008-5847 affects Constructr CMS versions 3.02.5 and earlier, where it stores user passwords in cleartext within its MySQL database. This vulnerability allows attackers with database access to easily retrieve sensitive user credentials. With a CVSS score of 2.6, this is a low-severity vulnerability requiring high attack complexity, as an attacker would need to gain access to the database itself (e.g., through another vulnerability) to exploit it. There is no evidence of active exploitation, nor is it listed in the KEV catalog; however, a public exploit (EDB-7529) exists, though community discussion and media coverage are minimal.