Srcms Project

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Srcms Project records in CISA KEV

No Srcms Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

4 records in Srcms · all components

TI-2018-13685 CVE-2018-19318 · GHSA-8vgh-24mv-398q

LOW 39

SRCMS 3.0.0 allows CSRF via admin.php?m=Admin&c=manager&a=update to change the username and password of the super administrator account.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00494 Published 2018-11-16 No fix listed CWE-352

TI-2018-10172 CVE-2018-14069 · GHSA-6366-583r-2q89

LOW 39

An issue was discovered in SRCMS V2.3.1.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00502 Published 2018-07-15 No fix listed CWE-352

TI-2018-10171 CVE-2018-14068 · GHSA-hjgg-rmmj-h44v

LOW 39

An issue was discovered in SRCMS V2.3.1.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.0065 Published 2018-07-15 No fix listed CWE-352

TI-2018-13686 CVE-2018-19319 · GHSA-2hjm-gpw3-28qp

LOW 29

SRCMS 3.0.0 allows CSRF via admin.php?m=Admin&c=gifts&a=update to change goods prices with the super administrator's privileges.

CVSS 3.0MEDIUM 6.5 Network No auth User interaction EPSS 0.00422 Published 2018-11-16 No fix listed CWE-352