Sitos Sitos Six
6 CVEs affecting Sitos Sitos Six. Latest disclosed: 2019-10-07. Critical: 3, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-15751 | Critical | 9.8 | 2019-10-07 | An unrestricted file upload vulnerability in SITOS six Build v6.2.1 allows remote attackers to execute arbitrary code by uploading a SCORM file with an executa… |
CVE-2019-15748 | Critical | 9.8 | 2019-10-07 | SITOS six Build v6.2.1 permits unauthorised users to upload and import a SCORM 2004 package by browsing directly to affected pages. An unauthenticated attacker… |
CVE-2019-15746 | Critical | 9.8 | 2019-10-07 | SITOS six Build v6.2.1 allows an attacker to inject arbitrary PHP commands. As a result, an attacker can compromise the running server and execute system comma… |
CVE-2019-15747 | High | 8.8 | 2019-10-07 | SITOS six Build v6.2.1 allows a user with the user role of Seminar Coordinator to escalate their permission to the Systemadministrator role due to insufficient… |
CVE-2019-15749 | Medium | 6.5 | 2019-10-07 | SITOS six Build v6.2.1 allows a user to change their password and recovery email address without requiring them to confirm the change with their old password… |
CVE-2019-15750 | Medium | 6.1 | 2019-10-07 | A Cross-Site Scripting (XSS) vulnerability in the blog function in SITOS six Build v6.2.1 allows remote attackers to inject arbitrary web script or HTML via th… |