CVE-2018-10050

CVE-2018-10050 affects iScripts eSwap v2.4, where the Admin Panel’s registration_settings.php hidden ddlFree parameter is vulnerable to SQL injection. The issue is described across multiple connected sources (NVD, Red Hat advisory, CNVD) as a SQL injection vulnerability in iScripts eSwap v2.4, wi...

CVE-2018-10050: Improper Neutralization of Special Elements used in an SQL Command

iScripts eSwap v2.4 has SQL injection via the "registrationsettings.php" ddlFree parameter in the Admin Panel...

PT-2018-9642

Name of the Vulnerable Software and Affected Versions: iScripts eSwap version 2.4 Description: The issue is related to SQL injection via the ddlFree parameter in the "registration settings.php" file within the Admin Panel. Recommendations: For iScripts eSwap version 2.4, consider restricting acce...