Login Request a demo
ES
Product
Eswap
by Iscripts · last CVE May 25, 2018
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 2High 3Medium 2Low 0
Severity
All severities9Critical2High3Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Eswap to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2018-11373
9.8
1%
May 22
iScripts eSwap v2.4 has SQL injection via the "salelistdetailed.php" User Panel ToId parameter
Affected: 2.4
CVE-2018-11372
9.8
1%
May 22
iScripts eSwap v2.4 has SQL injection via the wishlistdetailed.php User Panel ToId parameter
Affected: 2.4
CVE-2018-11470
8.8
1%
May 25
iScripts eSwap v2.4 has SQL injection via the "search.php" 'Told' parameter in the User Panel
Affected: 2.4
CVE-2018-10048
8.8
0%
Apr 11
iScripts eSwap v2.4 has CSRF via "registration_settings.php" in the Admin Panel
Affected: 2.4
CVE-2018-10050
7.2
1%
Apr 11
iScripts eSwap v2.4 has SQL injection via the "registration_settings.php" ddlFree parameter in the Admin Panel
Affected: 2.4
CVE-2018-10135
6.1
1%
Apr 16
iScripts eSwap v2.4 has Reflected XSS via the "catwiseproducts.php" catid parameter in the User Panel
Affected: 2.4
CVE-2018-10049
4.8
1%
Apr 11
iScripts eSwap v2.4 has XSS via the "registration_settings.php" txtDate parameter in the Admin Panel
Affected: 2.4
CVE-2010-5036
–
1%
Nov 2
SQL injection vulnerability in addsale.php in iScripts eSwap 2.0 allows remote attackers to execute arbitrary SQL commands via the type parameter
Affected: 2.0
CVE-2010-5035
–
2%
Nov 2
Cross-site scripting (XSS) vulnerability in search.php in iScripts eSwap 2.0 allows remote attackers to inject arbitrary web script or HTML via the txtHomeSearch parameter (aka…
Affected: 2.0
Showing 9