CVE-2017-17620

Lawyer Search Script 1.1 has SQL Injection via the /lawyer-list city parameter...

CVE-2017-17616

Event Search Script 1.0 has SQL Injection via the /event-list city parameter...

CVE-2017-17620

Lawyer Search Script 1.1 has SQL Injection via the /lawyer-list city parameter...

CVE-2017-17616

Event Search Script 1.0 has SQL Injection via the /event-list city parameter...

CVE-2017-17611

Doctor Search Script 1.0 has SQL Injection via the /list city parameter...

CVE-2017-17611

Doctor Search Script 1.0 has SQL Injection via the /list city parameter...

CVE-2017-17606

Co-work Space Search Script 1.0 has SQL Injection via the /list city parameter...

Sql injection

Event Search Script 1.0 has SQL Injection via the /event-list city parameter...

Sql injection

Lawyer Search Script 1.1 has SQL Injection via the /lawyer-list city parameter...

Sql injection

Doctor Search Script 1.0 has SQL Injection via the /list city parameter...

CVE-2017-17616

CVE-2017-17616 affects PHP Scripts Mall Event Search Script 1.0. A SQL injection exists in the /event-list endpoint via the city parameter, enabling a remote attacker to inject SQL commands. The CNVD entry confirms the vulnerability and the affected script version; exploitation details are provid...

CVE-2017-17620

Lawyer Search Script 1.1 has SQL Injection via the /lawyer-list city parameter...

CVE-2017-17616

Event Search Script 1.0 has SQL Injection via the /event-list city parameter...

CVE-2017-17611

The CVE-2017-17611 entry concerns Doctor Search Script 1.0 (PHP Scripts Mall India). A SQL injection vulnerability exists in the /list endpoint via the city parameter, caused by unsanitized input used in SQL queries. Affected component: Doctor Search Script 1.0; vendor: PHP Scripts Mall (India); ...

CVE-2017-17611

Doctor Search Script 1.0 has SQL Injection via the /list city parameter...

CVE-2017-17606

CVE-2017-17606 affects the PHP Scripts Mall Co-work Space Search Script 1.0, with a SQL injection vulnerability in the /list endpoint via the city parameter. The root cause is unsanitized input allowing arbitrary SQL execution, leading to potential data disclosure/ modification. In the connected ...

CVE-2017-17620

CVE-2017-17620 affects Lawyer Search Script 1.1 (PHP Scripts Mall India). The vulnerability is a SQL Injection in the /lawyer-list endpoint via the city parameter, caused by improper input handling in the script. Public references indicate a remote attacker could inject SQL commands through city,...

CVE-2017-17620: Improper Neutralization of Special Elements used in an SQL Command

Lawyer Search Script 1.1 has SQL Injection via the /lawyer-list city parameter...

CVE-2017-17606: Improper Neutralization of Special Elements used in an SQL Command

Co-work Space Search Script 1.0 has SQL Injection via the /list city parameter...

PT-2017-14916

Name of the Vulnerable Software and Affected Versions Lawyer Search Script version 1.1 Description The issue is related to SQL Injection, which can be exploited via the /lawyer-list API endpoint, specifically through the city parameter. Recommendations For Lawyer Search Script version 1.1, consid...