iScripts eSwap v2.4 has SQL injection via the "search.php" 'Told' parameter in the User Panel.

Published May 25, 2018 · Updated Sep 17, 2024 · Assigned by mitre