Keyone

3 exploits Active since May 2018
CVE-2018-11372 WRITEUP CRITICAL WRITEUP
Iscripts Eswap - SQL Injection
iScripts eSwap v2.4 has SQL injection via the wishlistdetailed.php User Panel ToId parameter.
CVSS 9.8
CVE-2018-11373 WRITEUP CRITICAL WORKING POC
Iscripts Eswap - SQL Injection
iScripts eSwap v2.4 has SQL injection via the "salelistdetailed.php" User Panel ToId parameter.
CVSS 9.8
CVE-2018-11470 WRITEUP HIGH WRITEUP
Iscripts Eswap - SQL Injection
iScripts eSwap v2.4 has SQL injection via the "search.php" 'Told' parameter in the User Panel.
CVSS 8.8