Vulnerabilities (CVE)

Filtered by vendor Iscripts Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2018-11470 1 Iscripts 1 Eswap 2018-06-27 6.5 MEDIUM 8.8 HIGH
iScripts eSwap v2.4 has SQL injection via the "search.php" 'Told' parameter in the User Panel.
CVE-2018-10137 1 Iscripts 1 Uberforx 2018-05-22 6.8 MEDIUM 8.8 HIGH
iScripts UberforX 2.2 has CSRF in the "manage_settings" section of the Admin Panel via the /cms?section=manage_settings&action=edit URI.
CVE-2018-10048 1 Iscripts 1 Eswap 2018-05-09 6.8 MEDIUM 8.8 HIGH
iScripts eSwap v2.4 has CSRF via "registration_settings.php" in the Admin Panel.
CVE-2018-10050 1 Iscripts 1 Eswap 2018-05-09 6.5 MEDIUM 7.2 HIGH
iScripts eSwap v2.4 has SQL injection via the "registration_settings.php" ddlFree parameter in the Admin Panel.