CVE-2017-17926

CVE-2017-17926 concerns the PHP Scripts Mall Professional Service Script, where a predictable registration URL enables remote attackers to create accounts using invalid or spoofed email addresses. The description across multiple connected documents consistently identifies the vulnerability as a p...

CVE-2017-17925

PHP Scripts Mall Professional Service Script has XSS via the admin/generalsettingupd.php websitetitle parameter...

CVE-2017-17928

The CVE-2017-17928 entry concerns PHP Scripts Mall Professional Service Script. It describes an SQL injection vulnerability in the admin/review.php endpoint triggered via the id parameter, allowing an attacker to manipulate queries. Connected CNVD/NVD records corroborate a SQL injection vulnerabi...

PHP Scripts Mall Professional Service Script SQL Injection Vulnerability

PHP Scripts Mall Professional Service Script is a set of PHP based professional service website scripts by PHP Scripts Mall India. The script is able to provide users with the required information about professional service providers. A SQL injection vulnerability exists in PHP Scripts Mall...

CVE-2017-17625

Professional Service Script 1.0 has SQL Injection via the service-list city parameter...

CVE-2017-17625

Professional Service Script 1.0 has SQL Injection via the service-list city parameter...

Sql injection

Professional Service Script 1.0 has SQL Injection via the service-list city parameter...

CVE-2017-17625

CVE-2017-17625 concerns PHP Scripts Mall Professional Service Script 1.0, where the SQL injection vulnerability exists in the service-list endpoint via the city parameter. The root cause is an injectable SQL query exposed by the city input, enabling an attacker to manipulate the database. Public ...

CVE-2017-17625

Professional Service Script 1.0 has SQL Injection via the service-list city parameter...

CVE-2017-17625: Improper Neutralization of Special Elements used in an SQL Command

Professional Service Script 1.0 has SQL Injection via the service-list city parameter...

Professional Service Script 1.0 SQL Injection

Exploit Title: Professional Service Script 1.0 - SQL Injection Dork: N/A Date: 09.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/professional-service-script/ Version: 1.0 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: N/A...

Professional Service Script 1.0 - 'service-list?city' SQL Injection

Exploit Title: Professional Service Script 1.0 - SQL Injection Dork: N/A Date: 09.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/professional-service-script/ Version: 1.0 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: N/A...

Professional Service Script 1.0 - service-list?city SQL Injection

Professional Service Script 1.0 - service-list?city SQL Injection Exploit Title: Professional Service Script 1.0 - SQL Injection Dork: N/A Date: 09.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/professional-service-script/ Version:...

Professional Service Script 1.0 - service-list?city SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Professional Service Script 1.0 - SQL Injection Dork: N/A Date: 09.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/professional-service-script/ Version: 1.0 Category...