Doctor Search Script

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2018-6655 MEDIUM POC This Month

PHP Scripts Mall Doctor Search Script 1.0.2 has Stored XSS via an arbitrary profile field. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

XSS PHP Doctor Search Script

NVD Exploit-DB

CVSS 3.0

5.4

EPSS

0.6%

CVE-2017-17611 CRITICAL POC Act Now

Doctor Search Script 1.0 has SQL Injection via the /list city parameter. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

SQLi Doctor Search Script

NVD Exploit-DB

CVSS 3.0

9.8

EPSS

2.5%

CVE-2018-6655

EPSS 1% CVSS 5.4

MEDIUM POC This Month

XSS PHP Doctor Search Script

NVD Exploit-DB

CVE-2017-17611

EPSS 3% CVSS 9.8

CRITICAL POC Act Now

SQLi Doctor Search Script

NVD Exploit-DB