iScripts eSwap registration_settings.php cross-site scripting vulnerability

IScripts eSwap is an item trading software from IScripts Inc. The program supports the use of virtual currencies for trading or direct item exchange.User Panel is one of the user panels. A cross-site scripting vulnerability exists in iScripts eSwap v2.4. The vulnerability can be exploited via the...

iScripts eSwap SQL Injection Vulnerability

IScripts eSwap is an item trading program from IScripts Inc. that supports the use of virtual currency or direct item exchange. The program supports the use of virtual currencies to trade or directly exchange items.User Panel is one of the user panels. A SQL injection vulnerability exists in...

iScripts eSwap Cross-Site Request Forgery Vulnerability

IScripts eSwap is an item trading software from IScripts Inc. The program supports the use of virtual currencies for trading or direct item exchange.User Panel is one of the user panels. A cross-site request forgery vulnerability exists in iScripts eSwap v2.4. The vulnerability can be exploited t...

Cross site request forgery (csrf)

iScripts eSwap v2.4 has CSRF via "registrationsettings.php" in the Admin Panel...

CVE-2018-10050

iScripts eSwap v2.4 has SQL injection via the "registrationsettings.php" ddlFree parameter in the Admin Panel...

Sql injection

iScripts eSwap v2.4 has SQL injection via the "registrationsettings.php" ddlFree parameter in the Admin Panel...

CVE-2018-10049

iScripts eSwap v2.4 has XSS via the "registrationsettings.php" txtDate parameter in the Admin Panel...

Design/Logic Flaw

iScripts eSwap v2.4 has XSS via the "registrationsettings.php" txtDate parameter in the Admin Panel...

CVE-2018-10048

iScripts eSwap v2.4 has CSRF via "registrationsettings.php" in the Admin Panel...

CVE-2018-10050

iScripts eSwap v2.4 has SQL injection via the "registrationsettings.php" ddlFree parameter in the Admin Panel...

CVE-2018-10048

iScripts eSwap v2.4 has CSRF via "registrationsettings.php" in the Admin Panel...

CVE-2018-10049

iScripts eSwap v2.4 has XSS via the "registrationsettings.php" txtDate parameter in the Admin Panel...

CVE-2018-10050

CVE-2018-10050 affects iScripts eSwap v2.4, where the Admin Panel’s registration_settings.php hidden ddlFree parameter is vulnerable to SQL injection. The issue is described across multiple connected sources (NVD, Red Hat advisory, CNVD) as a SQL injection vulnerability in iScripts eSwap v2.4, wi...

CVE-2018-10049

iScripts eSwap v2.4 has XSS via the "registrationsettings.php" txtDate parameter in the Admin Panel...

CVE-2018-10048

The CVE-2018-10048 entry concerns iScripts eSwap v2.4, where a Cross-Site Request Forgery (CSRF) vulnerability exists via the Admin Panel page registration_settings.php. The connected sources corroborate a CSRF issue affecting the Admin Panel functionality, identified across multiple feeds (NVD, ...

CVE-2018-10049

CVE-2018-10049 : iScripts eSwap v2.4 is vulnerable to a cross-site scripting (XSS) flaw in the Admin Panel, triggered via the registration_settings.php TXT Date parameter. The issue originates in the Admin Panel input handling and can lead to script execution in the context of an authenticated us...

CVE-2018-10048

iScripts eSwap v2.4 has CSRF via "registrationsettings.php" in the Admin Panel...

CVE-2018-10050

iScripts eSwap v2.4 has SQL injection via the "registrationsettings.php" ddlFree parameter in the Admin Panel...

iScripts eSwap 2.0 - sqli and xss vulnerability

No description provided by source...

CVE-2010-5035

Cross-site scripting XSS vulnerability in search.php in iScripts eSwap 2.0 allows remote attackers to inject arbitrary web script or HTML via the txtHomeSearch parameter aka the search field. NOTE: some of these details are obtained from third party information...