3 matches found
Sql injection
iScripts eSwap v2.4 has SQL injection via the "search.php" 'Told' parameter in the User Panel...
6.5CVSS9.1AI score0.01037EPSS
SaveExploits1References1Affected Software1
CVE-2018-11470
iScripts eSwap v2.4 has SQL injection via the "search.php" 'Told' parameter in the User Panel...
9.2AI score0.01037EPSS
SaveExploits1References1
CVE-2018-11470: Improper Neutralization of Special Elements used in an SQL Command
iScripts eSwap v2.4 has SQL injection via the "search.php" 'Told' parameter in the User Panel...
8.8CVSS7.7AI score0.01037EPSS
SaveExploits1References2
20