CVE-2018-19319

SRCMS 3.0.0 allows CSRF via admin.php?m=Admin&c=gifts&a=update to change goods prices with the super administrator's privileges.
References
Link Resource
https://github.com/martinzhou2015/SRCMS-dev/issues/1 Exploit Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:srcms_project:srcms:3.0.0:*:*:*:*:*:*:*

History

No history.

Information

Published : 2018-11-16 19:29

Updated : 2024-02-28 16:48


NVD link : CVE-2018-19319

Mitre link : CVE-2018-19319

CVE.ORG link : CVE-2018-19319


JSON object : View

Products Affected

srcms_project

  • srcms
CWE
CWE-352

Cross-Site Request Forgery (CSRF)