Lawyer Search Script Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Lawyer Search Script Project records in CISA KEV

No Lawyer Search Script Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Lawyer Search Script · all components

TI-2017-12891 CVE-2017-17620 · GHSA-fqhv-j653-jq4f

MEDIUM 48

Lawyer Search Script 1.1 has SQL Injection via the /lawyer-list city parameter.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.0305 Published 2017-12-13 No fix listed CWE-89

TI-2018-05009 CVE-2018-6861 · GHSA-82vg-8rf4-2xfp

LOW 25

Cross Site Scripting (XSS) exists in PHP Scripts Mall Lawyer Search Script 1.0.2 via a profile update parameter.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00554 Published 2018-02-12 No fix listed CWE-79