high8.8
CVE-2018-11470
iScripts eSwap v2.4 has SQL injection via the "search.php" 'Told' parameter in the User Panel.
Impact
iScripts eSwap v2.4 has SQL injection via the "search.php" 'Told' parameter in the User Panel.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Iscripts | Eswap | Version 2.4 |