CVE-2018-6861

The CVE-2018-6861 entry describes a Cross Site Scripting (XSS) vulnerability in PHP Scripts Mall Lawyer Search Script 1.0.2, exploitable via a profile update parameter. Multiple sources (NVD, CNVD, CVE listings) corroborate that user-supplied input in profile fields is not properly sanitized, all...

CVE-2018-6861

Cross Site Scripting XSS exists in PHP Scripts Mall Lawyer Search Script 1.0.2 via a profile update parameter...

Lawyer Search Script 1.0.2 - Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: Lawyer Search Script - 1.0.2 - Stored XSS Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/lawyer-script/ Category: Web Application Exploit Author: Prasenjit Kanti Paul Web:...

Lawyer Search Script 1.0.2 - Cross-Site Scripting

Lawyer Search Script 1.0.2 - Cross-Site Scripting. CVE-2018-6861. Webapps exploit for PHP platform Exploit Title: Lawyer Search Script - 1.0.2 - Stored XSS Date: 07.02.2018 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/lawyer-script/...

PHP Scripts Mall Doctor Search Script Cross-Site Scripting Vulnerability

PHP Scripts Mall Doctor Search Script is a PHP based online doctor search website script by PHP Scripts Mall India. A cross-site scripting vulnerability exists in PHP Scripts Mall Doctor Search Script version 1.0.2. A remote attacker can exploit this vulnerability to inject arbitrary web script o...

CVE-2018-6655

PHP Scripts Mall Doctor Search Script 1.0.2 has Stored XSS via an arbitrary profile field...

CVE-2018-6655

The CVE-2018-6655 entry affects PHP Scripts Mall Doctor Search Script 1.0.2, describing a Stored Cross-Site Scripting vulnerability via an arbitrary profile field. Public artifacts (exploit-db, 0day, CNVD/NVD mirrors) corroborate that an attacker could inject arbitrary script/HTML through profile...

CVE-2018-6655

PHP Scripts Mall Doctor Search Script 1.0.2 has Stored XSS via an arbitrary profile field...

Career Portal 1.0 Cross Site Scripting

Exploit Title: Career Portal - Online Job Search Script - Xss Google Dork: N/A Date: 2018/01/01 Exploit Author: ShanoWeb Author Mail : MrdotNet2NetatGmaildotcom Vendor Homepage: http://sharjeelanjum.com/ Software Buy:...

PHP Scripts Mall Lawyer Search Script SQL Injection Vulnerability

PHP Scripts Mall Lawyer Search Script is a set of PHP based law firm management scripts by PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall Lawyer Search Script version 1.1. A remote attacker can exploit this vulnerability by sending the 'city' parameter to...

PHP Scripts Mall Co-work Space Search Script SQL Injection Vulnerability

PHP Scripts Mall Co-work Space Search Script is a set of PHP based shared space search script by PHP Scripts Mall India. The script supports users to list workspace websites, amenities, location details, contact information etc. A SQL injection vulnerability exists in PHP Scripts Mall Co-work Spa...

PHP Scripts Mall Doctor Search Script SQL Injection Vulnerability

PHP Scripts Mall Doctor Search Script is a PHP based online doctor search website script by PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall Doctor Search Script version 1.0. The vulnerability can be exploited by a remote attacker to inject SQL commands by sending...

PHP Scripts Mall Event Search Script SQL Injection Vulnerability

PHP Scripts Mall Event Search Script is a PHP based online event registration script from PHP Scripts Mall India. The script can be embedded into a website and accept online event bookings from other organizations or companies. A SQL injection vulnerability exists in PHP Scripts Mall Event Search...

CVE-2017-17620

Lawyer Search Script 1.1 has SQL Injection via the /lawyer-list city parameter...

CVE-2017-17620

Lawyer Search Script 1.1 has SQL Injection via the /lawyer-list city parameter...

CVE-2017-17616

Event Search Script 1.0 has SQL Injection via the /event-list city parameter...

CVE-2017-17616

Event Search Script 1.0 has SQL Injection via the /event-list city parameter...

CVE-2017-17611

Doctor Search Script 1.0 has SQL Injection via the /list city parameter...

CVE-2017-17606

Co-work Space Search Script 1.0 has SQL Injection via the /list city parameter...

CVE-2017-17611

Doctor Search Script 1.0 has SQL Injection via the /list city parameter...