Filtered by vendor Iscripts
Subscriptions
Total
29 CVE
CVE | Vendors | Products | Updated | CVSS v3.1 |
---|---|---|---|---|
CVE-2018-11372 | 1 Iscripts | 1 Eswap | 2024-11-21 | N/A |
iScripts eSwap v2.4 has SQL injection via the wishlistdetailed.php User Panel ToId parameter. | ||||
CVE-2018-10137 | 1 Iscripts | 1 Uberforx | 2024-11-21 | N/A |
iScripts UberforX 2.2 has CSRF in the "manage_settings" section of the Admin Panel via the /cms?section=manage_settings&action=edit URI. | ||||
CVE-2018-10136 | 1 Iscripts | 1 Uberforx | 2024-11-21 | N/A |
iScripts UberforX 2.2 has Stored XSS in the "manage_settings" section of the Admin Panel via a value field to the /cms?section=manage_settings&action=edit URI. | ||||
CVE-2018-10135 | 1 Iscripts | 1 Eswap | 2024-11-21 | N/A |
iScripts eSwap v2.4 has Reflected XSS via the "catwiseproducts.php" catid parameter in the User Panel. | ||||
CVE-2018-10052 | 1 Iscripts | 1 Supportdesk | 2024-11-21 | N/A |
iScripts SupportDesk v4.3 has XSS via the admin/inteligentsearchresult.php txtinteligentsearch parameter. | ||||
CVE-2018-10051 | 1 Iscripts | 1 Supportdesk | 2024-11-21 | N/A |
iScripts SupportDesk v4.3 has XSS via the staff/inteligentsearchresult.php txtinteligentsearch parameter. | ||||
CVE-2018-10050 | 1 Iscripts | 1 Eswap | 2024-11-21 | N/A |
iScripts eSwap v2.4 has SQL injection via the "registration_settings.php" ddlFree parameter in the Admin Panel. | ||||
CVE-2018-10049 | 1 Iscripts | 1 Eswap | 2024-11-21 | N/A |
iScripts eSwap v2.4 has XSS via the "registration_settings.php" txtDate parameter in the Admin Panel. | ||||
CVE-2018-10048 | 1 Iscripts | 1 Eswap | 2024-11-21 | N/A |
iScripts eSwap v2.4 has CSRF via "registration_settings.php" in the Admin Panel. |