Show filters
2 Total Results
Displaying 1-2 of 2
Sort by:
Attacker Value
Unknown

CVE-2018-19319

Disclosure Date: November 16, 2018 (last updated November 27, 2024)
SRCMS 3.0.0 allows CSRF via admin.php?m=Admin&c=gifts&a=update to change goods prices with the super administrator's privileges.
0
0
Attacker Value
Unknown

CVE-2018-19318

Disclosure Date: November 16, 2018 (last updated November 27, 2024)
SRCMS 3.0.0 allows CSRF via admin.php?m=Admin&c=manager&a=update to change the username and password of the super administrator account.
0
0