Exploitation Summary
EIP tracks 1 public exploit for CVE-2008-5859. PoCs published by fuzion.
AI-analyzed exploit summary This is a writeup detailing multiple vulnerabilities in Constructr CMS <= 3.02.5, including directory traversal, source disclosure, arbitrary file creation, and SQL injection. It provides exploit URLs and payloads but lacks executable code.
Description
SQL injection vulnerability in index.php in Constructr CMS 3.02.5 and earlier, when register_globals is enabled and magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the show_page parameter.
Exploits (1)
This is a writeup detailing multiple vulnerabilities in Constructr CMS <= 3.02.5, including directory traversal, source disclosure, arbitrary file creation, and SQL injection. It provides exploit URLs and payloads but lacks executable code.