Lucene search
+L

3 matches found

OSV
OSV
added 2017/04/12 10:59 p.m.8 views

CVE-2016-4891

Cross-site request forgery CSRF vulnerability in SetsucoCMS all versions allows remote attackers to hijack the authentication of an administrator to change settings via unspecified vectors...

8.8CVSS5.8AI score0.00977EPSS
SaveExploits0References3
CVE
CVE
added 2017/04/12 10:0 p.m.50 views

CVE-2016-4891

CVE-2016-4891 is a CSRF vulnerability in SetucoCMS affecting all versions, enabling remote attackers to hijack an administrator’s session to change settings via unspecified vectors. The linked JVN entries confirm the issue and note the impact as unintended setting changes; multiple sources also r...

8.8CVSS8.8AI score0.00977EPSS
SaveExploits0References3Affected Software1
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2016/10/07 12:0 a.m.59 views

JVN#80157683: SetucoCMS multiple vulnerabilities

SetucoCMS provided by SetucoCMS Project is a content management system CMS. SetucoCMS contains multiple vulnerabilities listed below. Cross-site request forgery - CVE-2016-4891 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N| Base Score: 5.4 CVSS v2|...

8.8CVSS7.3AI score0.02136EPSS
SaveExploits0
Rows per page
Query Builder