EUVD-2017-8769

Malware in sbrugna...

EUVD-2018-18402

Malware in sbrugna...

PHP Scripts Mall Doctor Search Script Cross-Site Scripting Vulnerability

PHP Scripts Mall Doctor Search Script is a PHP based online doctor search website script by PHP Scripts Mall India. A cross-site scripting vulnerability exists in PHP Scripts Mall Doctor Search Script version 1.0.2. A remote attacker can exploit this vulnerability to inject arbitrary web script o...

CVE-2018-6655

PHP Scripts Mall Doctor Search Script 1.0.2 has Stored XSS via an arbitrary profile field...

CVE-2018-6655

The CVE-2018-6655 entry affects PHP Scripts Mall Doctor Search Script 1.0.2, describing a Stored Cross-Site Scripting vulnerability via an arbitrary profile field. Public artifacts (exploit-db, 0day, CNVD/NVD mirrors) corroborate that an attacker could inject arbitrary script/HTML through profile...

CVE-2018-6655

PHP Scripts Mall Doctor Search Script 1.0.2 has Stored XSS via an arbitrary profile field...

PT-2018-17697

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Doctor Search Script version 1.0.2 Description The issue is related to Stored XSS, which occurs via an arbitrary profile field. This allows for potential malicious script execution. Recommendations For PHP Scripts Mall Doctor...

CVE-2018-6655: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall Doctor Search Script 1.0.2 has Stored XSS via an arbitrary profile field...

PHP Scripts Mall Doctor Search Script SQL Injection Vulnerability

PHP Scripts Mall Doctor Search Script is a PHP based online doctor search website script by PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall Doctor Search Script version 1.0. The vulnerability can be exploited by a remote attacker to inject SQL commands by sending...

CVE-2017-17611

Doctor Search Script 1.0 has SQL Injection via the /list city parameter...

CVE-2017-17611

Doctor Search Script 1.0 has SQL Injection via the /list city parameter...

Sql injection

Doctor Search Script 1.0 has SQL Injection via the /list city parameter...

CVE-2017-17611

The CVE-2017-17611 entry concerns Doctor Search Script 1.0 (PHP Scripts Mall India). A SQL injection vulnerability exists in the /list endpoint via the city parameter, caused by unsanitized input used in SQL queries. Affected component: Doctor Search Script 1.0; vendor: PHP Scripts Mall (India); ...

CVE-2017-17611

Doctor Search Script 1.0 has SQL Injection via the /list city parameter...

CVE-2017-17611: Improper Neutralization of Special Elements used in an SQL Command

Doctor Search Script 1.0 has SQL Injection via the /list city parameter...

PT-2017-14907

Name of the Vulnerable Software and Affected Versions Doctor Search Script version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the /list API endpoint, specifically through the city parameter. Recommendations For Doctor Search Script version 1.0, avoid...