Setucocms Project Setucocms — known CVE vulnerabilities

Every CVE whose affected-product data names Setucocms Project Setucocms, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2016-4891 — CVSS 8.8 (high): Cross-site request forgery (CSRF) vulnerability in SetsucoCMS all versions allows remote attackers to hijack the authentication of an…
• CVE-2016-4893 — CVSS 8.8 (high): SQL injection vulnerability in the SetsucoCMS all versions allows remote authenticated attackers to execute arbitrary SQL commands via…
• CVE-2016-4895 — CVSS 8.8 (high): SetsucoCMS all versions allows remote authenticated attackers to conduct code injection attacks via unspecified vectors.
• CVE-2016-4896 — CVSS 6.5 (medium): SetsucoCMS all versions does not properly manage sessions, which allows remote attackers to disclose or alter unauthorized information via…
• CVE-2016-4892 — CVSS 6.1 (medium): Cross-site scripting vulnerability in SetsucoCMS all versions allows remote attackers to inject arbitrary web script or HTML via…
• CVE-2016-4894 — CVSS 5.3 (medium): SetsucoCMS all versions allows remote attackers to cause a denial of service via unspecified vectors.