Login Request a demo
ES
Product
Eswap
by Iscripts · last CVE May 25, 2018
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 2High 3Medium 2Low 0
Severity
All severities9Critical2High3Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Eswap to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2018-11470
8.8
1%
May 25
iScripts eSwap v2.4 has SQL injection via the "search.php" 'Told' parameter in the User Panel
Affected: 2.4
CVE-2018-10048
8.8
0%
Apr 11
iScripts eSwap v2.4 has CSRF via "registration_settings.php" in the Admin Panel
Affected: 2.4
CVE-2018-10050
7.2
1%
Apr 11
iScripts eSwap v2.4 has SQL injection via the "registration_settings.php" ddlFree parameter in the Admin Panel
Affected: 2.4
Showing 3