Vulnerabilities (CVE)

Filtered by vendor Setucocms Project Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2016-4892 1 Setucocms Project 1 Setucocms 2017-05-23 4.3 MEDIUM 6.1 MEDIUM
Cross-site scripting vulnerability in SetsucoCMS all versions allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2016-4894 1 Setucocms Project 1 Setucocms 2017-05-23 5.0 MEDIUM 5.3 MEDIUM
SetsucoCMS all versions allows remote attackers to cause a denial of service via unspecified vectors.
CVE-2016-4896 1 Setucocms Project 1 Setucocms 2017-05-23 6.4 MEDIUM 6.5 MEDIUM
SetsucoCMS all versions does not properly manage sessions, which allows remote attackers to disclose or alter unauthorized information via unspecified vectors.