Sql injection

iScripts eSwap v2.4 has SQL injection via the "salelistdetailed.php" User Panel ToId parameter...

CVE-2018-11373

iScripts eSwap v2.4 has SQL injection via the "salelistdetailed.php" User Panel ToId parameter...

CVE-2018-11373

The CVE-2018-11373 entry concerns iScripts eSwap v2.4, where a SQL injection exists in the salelistdetailed.php User Panel ToId parameter. The root cause appears to be improper handling of user-supplied ToId leading to database query manipulation. Multiple connected sources (CNVD-2018-15242, RH: ...

PT-2018-10531

Name of the Vulnerable Software and Affected Versions iScripts eSwap version 2.4 Description The issue is related to SQL injection via the ToId parameter in the "salelistdetailed.php" User Panel. Recommendations For iScripts eSwap version 2.4, consider restricting access to the ToId parameter in...

CVE-2018-11373: Improper Neutralization of Special Elements used in an SQL Command

iScripts eSwap v2.4 has SQL injection via the "salelistdetailed.php" User Panel ToId parameter...