PatchTheCVEdoctor search script vulnerabilities and fixes
Recent CVEs affecting doctor search script, with upgrade or downgrade steps. 2 tracked.
Also searched as: doctorsearchscript.
doctor search script has 2 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2018-02-07. Highest priority: CVE-2017-17611 (score 66/100).
- CVE-2018-6655 MEDIUM 5.4 DOWNGRADE PHP Scripts Mall Doctor Search Script 1.0.2 has Stored XSS via an arbitrary profile field.
- CVE-2017-17611 CRITICAL 9.8 DOWNGRADE Doctor Search Script 1.0 has SQL Injection via the /list city parameter.
FAQ
How do I fix doctor search script vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is doctor search script being exploited right now?
None of the tracked doctor search script CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which doctor search script CVE should I patch first?
CVE-2017-17611 currently ranks highest (66/100): Doctor Search Script 1.0 has SQL Injection via the /list city parameter..