Sql injection

iScripts eSwap v2.4 has SQL injection via the "search.php" 'Told' parameter in the User Panel...

CVE-2018-11470

iScripts eSwap v2.4 has SQL injection via the "search.php" 'Told' parameter in the User Panel...

CVE-2018-11470: Improper Neutralization of Special Elements used in an SQL Command

iScripts eSwap v2.4 has SQL injection via the "search.php" 'Told' parameter in the User Panel...

PT-2018-10589

Name of the Vulnerable Software and Affected Versions iScripts eSwap version 2.4 Description The issue is related to SQL injection via the search.php API endpoint, specifically the Told parameter in the User Panel. Recommendations For iScripts eSwap version 2.4, consider restricting access to the...