CVE-2018-19923

HIGH

Sales & Company Management System < 2018-06-06 - Cross-Site Request Forgery via member_email.php

Title source: llm

An issue was discovered in Sales & Company Management System (SCMS) through 2018-06-06. There is member/member_email.php?action=edit CSRF.

Core 1

Core References

Exploit, Third Party Advisory x_refsource_misc

CVSS v3 8.8

EPSS 0.0052

EPSS Percentile 40.5%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE

CWE-352

Status published

Products (1)

sales_\&_company_management_system_project/sales_\&_company_management_system < 2018-06-06

Published Dec 06, 2018

Tracked Since Feb 18, 2026