EUVD-2018-3408

Malware in sbrugna...

Sql injection

iScripts eSwap v2.4 has SQL injection via the wishlistdetailed.php User Panel ToId parameter...

CVE-2018-11372

iScripts eSwap v2.4 has SQL injection via the wishlistdetailed.php User Panel ToId parameter...

CVE-2018-11372

iScripts eSwap v2.4 has SQL injection via the wishlistdetailed.php User Panel ToId parameter...

CVE-2018-11372

CVE-2018-11372 affects iScripts eSwap v2.4. The issue is an SQL injection in the Wishlistdetailed.php User Panel ToId parameter, caused by unsafe handling of the ToId input. The vulnerability can enable attackers to view, add, modify, or delete data in the backend database (as described across mu...

CVE-2018-11372

iScripts eSwap v2.4 has SQL injection via the wishlistdetailed.php User Panel ToId parameter...

PT-2018-10530

Name of the Vulnerable Software and Affected Versions iScripts eSwap version 2.4 Description The issue is related to SQL injection via the ToId parameter in the wishlistdetailed.php User Panel. Recommendations For iScripts eSwap version 2.4, avoid using the ToId parameter in the...

CVE-2018-11372: Improper Neutralization of Special Elements used in an SQL Command

iScripts eSwap v2.4 has SQL injection via the wishlistdetailed.php User Panel ToId parameter...