martinzhou2015/SRCMS-dev

Releases0

Stars10

SRCMS Dev Version

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2018-19318 ↗	Nov 16, 2018Friday, 16 November 2018, 19:29	—	6.8 MEDIUM
SRCMS 3.0.0 allows CSRF via admin.php?m=Admin&c=manager&a=update to change the username and password of the super administrator account.
CVE-2018-19319 ↗	Nov 16, 2018Friday, 16 November 2018, 19:29	—	4.3 MEDIUM
SRCMS 3.0.0 allows CSRF via admin.php?m=Admin&c=gifts&a=update to change goods prices with the super administrator's privileges.