PatchTheCVEdoctor search script project vulnerabilities
Recent CVEs affecting doctor search script project products. 2 tracked.
doctor search script project has 2 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2018-02-07. Highest priority: CVE-2017-17611 (score 66/100).
- CVE-2018-6655 MEDIUM 5.4 DOWNGRADE PHP Scripts Mall Doctor Search Script 1.0.2 has Stored XSS via an arbitrary profile field.
- CVE-2017-17611 CRITICAL 9.8 DOWNGRADE Doctor Search Script 1.0 has SQL Injection via the /list city parameter.
FAQ
How do I fix doctor search script project vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is doctor search script project being exploited right now?
None of the tracked doctor search script project CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which doctor search script project CVE should I patch first?
CVE-2017-17611 currently ranks highest (66/100): Doctor Search Script 1.0 has SQL Injection via the /list city parameter..