Lawyer Search Script

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2018-6861 MEDIUM POC This Month

Cross Site Scripting (XSS) exists in PHP Scripts Mall Lawyer Search Script 1.0.2 via a profile update parameter. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

XSS PHP Lawyer Search Script

NVD Exploit-DB

CVSS 3.1

5.4

EPSS

0.6%

CVE-2017-17620 CRITICAL POC Act Now

Lawyer Search Script 1.1 has SQL Injection via the /lawyer-list city parameter. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

SQLi Lawyer Search Script

NVD Exploit-DB

CVSS 3.0

9.8

EPSS

2.5%

CVE-2018-6861

EPSS 1% CVSS 5.4

MEDIUM POC This Month

XSS PHP Lawyer Search Script

NVD Exploit-DB

CVE-2017-17620

EPSS 3% CVSS 9.8

CRITICAL POC Act Now

SQLi Lawyer Search Script

NVD Exploit-DB