high8.8
CVE-2016-4891
Cross-site request forgery (CSRF) vulnerability in SetsucoCMS all versions allows remote attackers to hijack the authentication of an administrator to change s…
Impact
Cross-site request forgery (CSRF) vulnerability in SetsucoCMS all versions allows remote attackers to hijack the authentication of an administrator to change settings via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Setucocms Project | Setucocms | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://jvn.jp/en/jp/JVN80157683/index.html
- http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000196.html
- http://www.securityfocus.com/bid/93475
- http://jvn.jp/en/jp/JVN80157683/index.html
- http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000196.html
- http://www.securityfocus.com/bid/93475