Skip to content
Noroxi

srcms project records

4 published records for vendor srcms project.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 18

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

4 records
  • CVE-2018-14068
    35Monitor

    An issue was discovered in SRCMS V2.3.1.

    HighCVSS 8.8No exploitEPSS 1%

    srcms project · srcmsJul 15, 2018

  • CVE-2018-14069
    35Monitor

    An issue was discovered in SRCMS V2.3.1.

    HighCVSS 8.8No exploitEPSS 1%

    srcms project · srcmsJul 15, 2018

  • CVE-2018-19318
    35Monitor

    SRCMS 3.0.0 allows CSRF via admin.php?m=Admin&c=manager&a=update to change the username and password of the super administrator account.

    HighCVSS 8.8No exploitEPSS 0%

    srcms project · srcmsNov 16, 2018

  • CVE-2018-19319
    26Monitor

    SRCMS 3.0.0 allows CSRF via admin.php?m=Admin&c=gifts&a=update to change goods prices with the super administrator's privileges.

    MediumCVSS 6.5No exploitEPSS 0%

    srcms project · srcmsNov 16, 2018