doctor_search_script_project - MidnightBSD Security Advisories

Advisories for doctor_search_script_project

CVE-2017-17611 HIGH

Doctor Search Script 1.0 has SQL Injection via the /list city parameter.

CVSS 2.0

Severity: HIGH

Problem Type: CWE-89,

Products Affected

Vendor	Product	Version
doctor_search_script_project	doctor_search_script	1.0

CVE-2018-6655 LOW

PHP Scripts Mall Doctor Search Script 1.0.2 has Stored XSS via an arbitrary profile field.

CVSS 2.0

Severity: LOW

Problem Type: CWE-79,

Products Affected

Vendor	Product	Version
doctor_search_script_project	doctor_search_script	1.0.2