Iscripts Eswap vulnerabilities

• iscripts eswap iScripts eSwap v2.4 has SQL injection via the "search.php" 'Told' parameter in the User Panel. CVE-2018-11470 8.8 HighMay 25, 2018
• iscripts eswap iScripts eSwap v2.4 has SQL injection via the "salelistdetailed.php" User Panel ToId parameter. CVE-2018-11373 9.8 CriticalMay 22, 2018
• iscripts eswap iScripts eSwap v2.4 has SQL injection via the wishlistdetailed.php User Panel ToId parameter. CVE-2018-11372 9.8 CriticalMay 22, 2018
• iscripts eswap iScripts eSwap v2.4 has Reflected XSS via the "catwiseproducts.php" catid parameter in the User... CVE-2018-10135 6.1 MediumApril 16, 2018
• iscripts eswap iScripts eSwap v2.4 has SQL injection via the "registration_settings.php" ddlFree parameter in... CVE-2018-10050 7.2 HighApril 11, 2018
• iscripts eswap iScripts eSwap v2.4 has XSS via the "registration_settings.php" txtDate parameter in the Admin... CVE-2018-10049 4.8 MediumApril 11, 2018
• iscripts eswap iScripts eSwap v2.4 has CSRF via "registration_settings.php" in the Admin Panel. CVE-2018-10048 8.8 HighApril 11, 2018
• iscripts eswap SQL injection vulnerability in addsale.php in iScripts eSwap 2.0 allows remote attackers to... CVE-2010-5036 Public exploit 7.5 HighNovember 2, 2011
• iscripts eswap Cross-site scripting (XSS) vulnerability in search.php in iScripts eSwap 2.0 allows remote... CVE-2010-5035 Public exploit 4.3 MediumNovember 2, 2011