Filtered by vendor Setucocms Project Subscriptions
Filtered by product Setucocms Subscriptions
Total 6 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2016-4896 1 Setucocms Project 1 Setucocms 2017-05-23 N/A
SetsucoCMS all versions does not properly manage sessions, which allows remote attackers to disclose or alter unauthorized information via unspecified vectors.
CVE-2016-4895 1 Setucocms Project 1 Setucocms 2017-05-23 N/A
SetsucoCMS all versions allows remote authenticated attackers to conduct code injection attacks via unspecified vectors.
CVE-2016-4894 1 Setucocms Project 1 Setucocms 2017-05-23 N/A
SetsucoCMS all versions allows remote attackers to cause a denial of service via unspecified vectors.
CVE-2016-4893 1 Setucocms Project 1 Setucocms 2017-05-23 N/A
SQL injection vulnerability in the SetsucoCMS all versions allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors.
CVE-2016-4892 1 Setucocms Project 1 Setucocms 2017-05-23 N/A
Cross-site scripting vulnerability in SetsucoCMS all versions allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2016-4891 1 Setucocms Project 1 Setucocms 2017-05-23 N/A
Cross-site request forgery (CSRF) vulnerability in SetsucoCMS all versions allows remote attackers to hijack the authentication of an administrator to change settings via unspecified vectors.