CVE-2018-19318: Srcms Project Srcms

High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days.

SRCMS 3.0.0 allows CSRF via admin.php?m=Admin&c=manager&a=update to change the username and password of the super administrator account.

Affected products

• Srcms Project Srcms: version 3.0.0 only

Published 2018-11-16. Last modified 2026-06-17.