CVE-2018-6655

The CVE-2018-6655 entry affects PHP Scripts Mall Doctor Search Script 1.0.2, describing a Stored Cross-Site Scripting vulnerability via an arbitrary profile field. Public artifacts (exploit-db, 0day, CNVD/NVD mirrors) corroborate that an attacker could inject arbitrary script/HTML through profile...

CVE-2018-6655: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall Doctor Search Script 1.0.2 has Stored XSS via an arbitrary profile field...

WordPress Doctor Appointment Booking 1.0.0 SQL Injection / XSS

Exploit Title: Wordpress Doctor Appointment Booking Plugin v1.0.0 - SQL Injection / XSS Date: 2018-01-01 Exploit Author: 8bitsec Vendor Homepage: https://codecanyon.net/ Software Link: https://codecanyon.net/item/doctor-appointment-booking-wordpress-plugin/21215314 Version: 1.0.0 Tested on: Kali...

PHP Scripts Mall Doctor Search Script SQL Injection Vulnerability

PHP Scripts Mall Doctor Search Script is a PHP based online doctor search website script by PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall Doctor Search Script version 1.0. The vulnerability can be exploited by a remote attacker to inject SQL commands by sending...

CVE-2017-17611

Doctor Search Script 1.0 has SQL Injection via the /list city parameter...

CVE-2017-17611

Doctor Search Script 1.0 has SQL Injection via the /list city parameter...

Sql injection

Doctor Search Script 1.0 has SQL Injection via the /list city parameter...

CVE-2017-17611

Doctor Search Script 1.0 has SQL Injection via the /list city parameter...

CVE-2017-17611

The CVE-2017-17611 entry concerns Doctor Search Script 1.0 (PHP Scripts Mall India). A SQL injection vulnerability exists in the /list endpoint via the city parameter, caused by unsanitized input used in SQL queries. Affected component: Doctor Search Script 1.0; vendor: PHP Scripts Mall (India); ...

CVE-2017-17611: Improper Neutralization of Special Elements used in an SQL Command

Doctor Search Script 1.0 has SQL Injection via the /list city parameter...

drinkingfountaindoctor.com XSS vulnerability

Open Bug Bounty ID: OBB-452005 Description| Value ---|--- Affected Website:| drinkingfountaindoctor.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

carecredit.com XSS vulnerability

Open Bug Bounty ID: OBB-437742 Description| Value ---|--- Affected Website:| carecredit.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Qapsula: doctor consultations - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Qapsula: doctor consultations published at the 'play' market has multiple vulnerabilities...

Stored Cross-Site Scripting Vulnerability in Mythical Doctor App

The Mythical Doctor app is a leading doctor-patient type tool in the field of mobile health, dedicated to helping you build an online communication service between you and your doctor, and providing you with medicines to your home. A stored cross-site scripting vulnerability exists in the...

Linux Trojan Using Hacked IoT Devices to Send Spam Emails

Botnets, like Mirai, that are capable of infecting Linux-based internet-of-things IoT devices are constantly increasing and are mainly designed to conduct Distributed Denial of Service DDoS attacks, but researchers have discovered that cybercriminals are using botnets for mass spam mailings. New...

Aier Eye Group's Eye Neighborhood Doctor's Edition App for Android Has Logic Design Flaws

Eye Neighborhood Doctor Edition App is an application designed and developed for ophthalmologists and ophthalmology practitioners. The Android version of Eye Neighborhood Doctor Edition APP of Aier Ophthalmology Group has a logical design vulnerability, which allows an attacker to reset any accou...

Aier Eye Group's Eye Neighborhood Doctor's Edition App for Android Has Logic Design Flaws

Eye Neighborhood Doctor Edition App is an application designed and developed for ophthalmologists and ophthalmology practitioners. The Android version of Eye Neighborhood Doctor Edition APP of Aier Ophthalmology Group has a logic design vulnerability, which allows attackers to successfully regist...

Appointment Script - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Doctors Appointment Script - SQL Injection Google Dork: N/A Date: 05.04.2017 Vendor Homepage: http://appointment-script.com/ Software: http://appointment-script.com/demo Demo: http://appointment-script.com/demo Version: N/A Test...

Appointment Script - SQL Injection

Exploit Title: Doctors Appointment Script - SQL Injection Google Dork: N/A Date: 05.04.2017 Vendor Homepage: http://appointment-script.com/ Software: http://appointment-script.com/demo Demo: http://appointment-script.com/demo Version: N/A Tested on: Win7 x64, Kali Linux x64 Exploit Author: Ihsan...

Pregnant Emergency Doctor - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Pregnant Emergency Doctor published at the 'play' market has multiple vulnerabilities...