iScripts eSwap v2.4 has SQL injection via the wishlistdetailed.php User Panel ToId parameter.

Published May 22, 2018 · Updated Sep 16, 2024 · Assigned by mitre