Vulnerabilities (CVE)

Filtered by vendor Iscripts Subscribe
Filtered by product Eswap
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2018-11470 1 Iscripts 1 Eswap 2018-06-27 6.5 MEDIUM 8.8 HIGH
iScripts eSwap v2.4 has SQL injection via the "search.php" 'Told' parameter in the User Panel.
CVE-2018-10048 1 Iscripts 1 Eswap 2018-05-09 6.8 MEDIUM 8.8 HIGH
iScripts eSwap v2.4 has CSRF via "registration_settings.php" in the Admin Panel.
CVE-2018-10050 1 Iscripts 1 Eswap 2018-05-09 6.5 MEDIUM 7.2 HIGH
iScripts eSwap v2.4 has SQL injection via the "registration_settings.php" ddlFree parameter in the Admin Panel.