86 matches found
PT-2018-10589
Name of the Vulnerable Software and Affected Versions iScripts eSwap version 2.4 Description The issue is related to SQL injection via the search.php API endpoint, specifically the Told parameter in the User Panel. Recommendations For iScripts eSwap version 2.4, consider restricting access to the...
iScripts eSwap 'ToId' Parameter SQL Injection Vulnerability
iScripts eSwap is a set of item trading software. The software supports trading with virtual currencies or directly exchanging items. A SQL injection vulnerability exists in iScripts eSwap version 2.4. A remote attacker can use the 'ToId' parameter to view, add, modify, or delete information in t...
iScripts eSwap SQL Injection Vulnerability (CNVD-2018-15242)
iScripts eSwap is a set of item trading software. The software supports trading with virtual currencies or directly exchanging items. A SQL injection vulnerability exists in iScripts eSwap version 2.4. A remote attacker can use the 'ToId' parameter to view, add, modify, or delete information in t...
Sql injection
iScripts eSwap v2.4 has SQL injection via the wishlistdetailed.php User Panel ToId parameter...
Sql injection
iScripts eSwap v2.4 has SQL injection via the "salelistdetailed.php" User Panel ToId parameter...
CVE-2018-11373
iScripts eSwap v2.4 has SQL injection via the "salelistdetailed.php" User Panel ToId parameter...
CVE-2018-11372
iScripts eSwap v2.4 has SQL injection via the wishlistdetailed.php User Panel ToId parameter...
CVE-2018-11373
iScripts eSwap v2.4 has SQL injection via the "salelistdetailed.php" User Panel ToId parameter...
CVE-2018-11372
iScripts eSwap v2.4 has SQL injection via the wishlistdetailed.php User Panel ToId parameter...
CVE-2018-11373
iScripts eSwap v2.4 has SQL injection via the "salelistdetailed.php" User Panel ToId parameter...
CVE-2018-11372
iScripts eSwap v2.4 has SQL injection via the wishlistdetailed.php User Panel ToId parameter...
CVE-2018-11372
CVE-2018-11372 affects iScripts eSwap v2.4. The issue is an SQL injection in the Wishlistdetailed.php User Panel ToId parameter, caused by unsafe handling of the ToId input. The vulnerability can enable attackers to view, add, modify, or delete data in the backend database (as described across mu...
CVE-2018-11373
The CVE-2018-11373 entry concerns iScripts eSwap v2.4, where a SQL injection exists in the salelistdetailed.php User Panel ToId parameter. The root cause appears to be improper handling of user-supplied ToId leading to database query manipulation. Multiple connected sources (CNVD-2018-15242, RH: ...
PT-2018-10530
Name of the Vulnerable Software and Affected Versions iScripts eSwap version 2.4 Description The issue is related to SQL injection via the ToId parameter in the wishlistdetailed.php User Panel. Recommendations For iScripts eSwap version 2.4, avoid using the ToId parameter in the...
CVE-2018-11372: Improper Neutralization of Special Elements used in an SQL Command
iScripts eSwap v2.4 has SQL injection via the wishlistdetailed.php User Panel ToId parameter...
PT-2018-10531
Name of the Vulnerable Software and Affected Versions iScripts eSwap version 2.4 Description The issue is related to SQL injection via the ToId parameter in the "salelistdetailed.php" User Panel. Recommendations For iScripts eSwap version 2.4, consider restricting access to the ToId parameter in...
CVE-2018-11373: Improper Neutralization of Special Elements used in an SQL Command
iScripts eSwap v2.4 has SQL injection via the "salelistdetailed.php" User Panel ToId parameter...
iScripts eSwap cross-site scripting vulnerability (CNVD-2018-07983)
IScripts eSwap is an item trading program from IScripts Inc. that supports the use of virtual currency or direct item exchange. The program supports the use of virtual currencies for trading or direct item exchange.User Panel is one of the user panels. A cross-site scripting vulnerability exists ...