3 matches found
PT-2018-9642
Name of the Vulnerable Software and Affected Versions: iScripts eSwap version 2.4 Description: The issue is related to SQL injection via the ddlFree parameter in the "registration settings.php" file within the Admin Panel. Recommendations: For iScripts eSwap version 2.4, consider restricting acce...
PT-2018-9640
Name of the Vulnerable Software and Affected Versions: iScripts eSwap version 2.4 Description: The issue is related to a security problem where an attacker can inject malicious code. This is possible due to insufficient input validation in the txtDate parameter, which is part of the "registration...
PT-2018-9639
Name of the Vulnerable Software and Affected Versions: iScripts eSwap version 2.4 Description: The issue is related to a CSRF problem via the "registration settings.php" file in the Admin Panel. Recommendations: For iScripts eSwap version 2.4, consider restricting access to the "registration...