CVE-2016-4896
Published Apr 12, 2017SetsucoCMS all versions does not properly manage sessions, which allows remote attackers to disclose or alter unauthorized information via unspecified vectors.
Vendor/product archive
setucocms_project / setucocms CVEs
Beta · best-effort6 CVEs tagged to setucocms_project / setucocms — 0 Critical, 3 High, 3 Medium, 0 Low, 0 Unrated.
CVE-2016-4895
Published Apr 12, 2017SetsucoCMS all versions allows remote authenticated attackers to conduct code injection attacks via unspecified vectors.
CVE-2016-4894
Published Apr 12, 2017SetsucoCMS all versions allows remote attackers to cause a denial of service via unspecified vectors.
CVE-2016-4893
Published Apr 12, 2017SQL injection vulnerability in the SetsucoCMS all versions allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors.
CVE-2016-4892
Published Apr 12, 2017Cross-site scripting vulnerability in SetsucoCMS all versions allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2016-4891
Published Apr 12, 2017Cross-site request forgery (CSRF) vulnerability in SetsucoCMS all versions allows remote attackers to hijack the authentication of an administrator to change settings via unspecif…
Showing 1-6 of 6 CVEsPage 1 of 1