CVE-2017-17611

Doctor Search Script 1.0 has SQL Injection via the /list city parameter...

CVE-2017-17611

Doctor Search Script 1.0 has SQL Injection via the /list city parameter...

CVE-2017-17606

Co-work Space Search Script 1.0 has SQL Injection via the /list city parameter...

Sql injection

Event Search Script 1.0 has SQL Injection via the /event-list city parameter...

Sql injection

Lawyer Search Script 1.1 has SQL Injection via the /lawyer-list city parameter...

Sql injection

Doctor Search Script 1.0 has SQL Injection via the /list city parameter...

CVE-2017-17616

CVE-2017-17616 affects PHP Scripts Mall Event Search Script 1.0. A SQL injection exists in the /event-list endpoint via the city parameter, enabling a remote attacker to inject SQL commands. The CNVD entry confirms the vulnerability and the affected script version; exploitation details are provid...

CVE-2017-17620

Lawyer Search Script 1.1 has SQL Injection via the /lawyer-list city parameter...

CVE-2017-17616

Event Search Script 1.0 has SQL Injection via the /event-list city parameter...

CVE-2017-17611

Doctor Search Script 1.0 has SQL Injection via the /list city parameter...

CVE-2017-17611

The CVE-2017-17611 entry concerns Doctor Search Script 1.0 (PHP Scripts Mall India). A SQL injection vulnerability exists in the /list endpoint via the city parameter, caused by unsanitized input used in SQL queries. Affected component: Doctor Search Script 1.0; vendor: PHP Scripts Mall (India); ...

CVE-2017-17606

CVE-2017-17606 affects the PHP Scripts Mall Co-work Space Search Script 1.0, with a SQL injection vulnerability in the /list endpoint via the city parameter. The root cause is unsanitized input allowing arbitrary SQL execution, leading to potential data disclosure/ modification. In the connected ...

CVE-2017-17620

CVE-2017-17620 affects Lawyer Search Script 1.1 (PHP Scripts Mall India). The vulnerability is a SQL Injection in the /lawyer-list endpoint via the city parameter, caused by improper input handling in the script. Public references indicate a remote attacker could inject SQL commands through city,...

CVE-2017-17606: Improper Neutralization of Special Elements used in an SQL Command

Co-work Space Search Script 1.0 has SQL Injection via the /list city parameter...

CVE-2017-17620: Improper Neutralization of Special Elements used in an SQL Command

Lawyer Search Script 1.1 has SQL Injection via the /lawyer-list city parameter...

CVE-2017-17616: Improper Neutralization of Special Elements used in an SQL Command

Event Search Script 1.0 has SQL Injection via the /event-list city parameter...

CVE-2017-17611: Improper Neutralization of Special Elements used in an SQL Command

Doctor Search Script 1.0 has SQL Injection via the /list city parameter...

Lawyer Search Script 1.1 - lawyer-list?city SQL Injection

Lawyer Search Script 1.1 - lawyer-list?city SQL Injection Exploit Title: Lawyer Search Script 1.1 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/lawyer-script/ Version: 1.1 Category: Webapps Tested...

Lawyer Search Script 1.1 SQL Injection

Exploit Title: Lawyer Search Script 1.1 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/lawyer-script/ Version: 1.1 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: N/A Exploit Author: Ihsan...

Co-work Space Search Script 1.0 SQL Injection

Exploit Title: Co-work Space Search Script 1.0 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/co-work-space-search-script/ Demo: http://ordermanagementscript.com/demo/co-work-space/ Version: 1.0...