iScripts eSwap v2.4 has SQL injection via the "salelistdetailed.php" User Panel ToId parameter.

Published May 22, 2018 · Updated Sep 17, 2024 · Assigned by mitre