Vulnerabilities

TI-2018-13686 CVE-2018-19319 · GHSA-2hjm-gpw3-28qp

SRCMS 3.0.0 allows CSRF via admin.php?m=Admin&c=gifts&a=update to change goods prices…

LOW 29

SRCMS 3.0.0 allows CSRF via admin.php?m=Admin&c=gifts&a=update to change goods prices with the super administrator's privileges.

CVSS 3.0MEDIUM 6.5 Network No auth User interaction EPSS 0.00422 Published 2018-11-16 No fix listed CWE-352

TI-2018-13685 CVE-2018-19318 · GHSA-8vgh-24mv-398q

LOW 39

SRCMS 3.0.0 allows CSRF via admin.php?m=Admin&c=manager&a=update to change the username and password of the super administrator account.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00494 Published 2018-11-16 No fix listed CWE-352

TI-2018-10172 CVE-2018-14069 · GHSA-6366-583r-2q89

LOW 39

An issue was discovered in SRCMS V2.3.1.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00502 Published 2018-07-15 No fix listed CWE-352

TI-2018-10171 CVE-2018-14068 · GHSA-hjgg-rmmj-h44v

LOW 39

An issue was discovered in SRCMS V2.3.1.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.0065 Published 2018-07-15 No fix listed CWE-352