CVE-2018-11470

iScripts eSwap v2.4 has SQL injection via the "search.php" 'Told' parameter in the User Panel

published May 25, 2018

CVSS
—
EPSS
1%
Percentile
63.6
In the wild
Unconfirmed
What it is

iScripts eSwap v2.4 has SQL injection via the "search.php" 'Told' parameter in the User Panel.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01037 · 63.6th percentile
Published
2018-05-25T14:00Z
EPSS history
Timeline
  • 25 MAY 14:00Z
    iScripts eSwap v2.4 has SQL injection via the "search.php" 'Told' parameter in the User Panel
    cvelistv5